Skip to content

12.0.1

Latest
Latest

Choose a tag to compare

View all tags
@trasher trasher released this 28 Oct 11:08
· 41 commits to 12.0/bugfixes since this release
Immutable release. Only release title and notes can be modified.
12.0.1
7edb847

This is a security release, upgrading is recommended

Download it Official Docker image

You will find below the list of security issues fixed in this bugfixes version:

  • [SECURITY - Critical] External authentication bypass
  • [SECURITY - High] Ticket category reflected XSS
  • [SECURITY - High] Reflected XSS in users authorization list
  • [SECURITY - High] Privilege escalation by entity administrator
  • [SECURITY - High] Stored XSS on VLAN
  • [SECURITY - High] Reflected XSS in form header
  • [SECURITY - High] Stored XSS in dashboards
  • [SECURITY - Medium] Administrator account deactivation by unauthorized user

The full changelog is available for more details.

We would like to thank all people who contributed to this new version and all those who contributes regularly to the GLPI project!

Regards.

Assets 4
Loading