Znuny 7.0.17 (2024-04-17)

Release-Typ

Patchlevel

Sicherheitsrelevant

Ja

Änderungen

• Fixed security issue with JavaScript in body of article being executed in customer ticket zoom (CVE-2024-32492). Thanks to Martino Spagnuolo for reporting this issue.
• Fixed security issue with uploaded files that could be used for remote code execution (CVE-2024-32491). Thanks to Martino Spagnuolo for reporting and providing the fix.
• Fixed SQL injection issue when using the draft functionality (CVE-2024-32493). Thanks to Martino Spagnuolo for reporting the issue.

Read about all changes in the CHANGELOG.md. See the commits on GitHub for a list of all changes.

Download