Skip to content

v1.9.9

Compare
Choose a tag to compare
@Shazwazza Shazwazza released this 25 Mar 00:00
· 15 commits to master since this release

Security update

Fixes a Local File Inclusion security issue that could allow an attacker to get the contents of files within the website.

All sites using CDF should be upgraded to this latest version asap. The installation should be seamless and not have any breaking changes.

It is also advised that once you upgrade you clear out all files in ~/App_Data/TEMP/ClientDependency (or wherever you have your CDF temp files configured) and bump your CDF version.

Install/Update via Nuget

 Install-Package ClientDependency

https://www.nuget.org/packages/ClientDependency/1.9.9

Additional info can be found here https://umbraco.com/blog/security-advisory-17th-of-march-patch-for-your-site-is-now-available/