Skip to content

Fabmanager 6.6.0

Choose a tag to compare

View all tags
@gnepud gnepud released this 19 Oct 19:52
· 9 commits to master since this release
v6.6.0
391b3d5
  • Fix a security issue: prevent SQL injection in product sorting (FM-01)
  • Fix a security issue: enforce authorization on coupons and prevent arbitrary method execution (FM-03)
  • Fix a security issue: prevent SSRF and credential exfiltration in PayZen gateway test endpoint (FM-02)
  • Fix a security issue: restrict draft project access in show route, member search, and social sharing bots (FM-06)
  • Fix a security issue: require current password verification and confirmation on password update (FM-08)
  • Fix a security issue: prevent unauthorized direct object reference (IDOR) on invoices, orders, reservations, supporting documents, and accounting periods (FM-05)
  • Fix a security issue: prevent persistent HTML injection and XSS in notifications (FM-04)

Please read the change log for more details.

UPDATE

\curl -sSL upgrade.fab.mn | bash
Assets 2
Loading