Update Info  MyBB 1.8.20 Relase
#1
Bug 
MyBB 1.8.20 is now available, and is a security & maintenance release.
This release includes allowing users to see their unapproved content and view user referrals; compatibility with PHP >= 7.2 has been improved and jQuery has been upgraded to 3.0.0, which might affect custom JavaScript code in plugins and themes.
  • 5 security vulnerabilities addressed:

    • Medium risk: Reset Password reflected XSS
    • Medium risk: ModCP Profile Editor username reflected XSS — reported by Jovan Zivanovic of MaTRIS Research Group, SBA Research
    • Low risk: Predictable CSRF token for guest users — reported by Devilshakerz of MyBB Team
    • Low risk: ACP Stylesheet Properties XSS — reported by Cillian Collins
    • Low risk: Reset Password username enumeration via email — reported by Abdullah Md. Shaleh

  • [size=undefined]42 issues resolved[/size]
[*]Check Release Notes for a list of changes to language files, templates and unresolved issues.
Get latest MyBB Full & Upgrade Packages →
The MyBB Project extends thanks to reporters and researchers following responsible disclosure.
Go to mybb.com/security to report possible security concerns or to learn more about security research at MyBB.
If you would like to contribute to the Project, Get Involved.

Thanks,
MyBB Team
[Image: 51.jpg]
We11World [ Winning Eleven ] , Blog , Archive Forums
Reply


Possibly Related Threads...
Thread Author Views Last Post
Bug Update Info  MyBB 1.8.19 Released DiegoPino 518 09-12-2018, 12:07 AM
Last Post: DiegoPino
Bug Update Info  MyBB 1.8.18 Released DiegoPino 461 08-22-2018, 11:19 PM
Last Post: DiegoPino
Bug Update Info  MyBB 1.8.17 Released DiegoPino 493 07-18-2018, 06:29 PM
Last Post: DiegoPino
Star Update Info  MyBB 1.8.16 Relased DiegoPino 493 07-06-2018, 11:37 PM
Last Post: DiegoPino
Exclamation Update Info  Información sobre Actualizaciones de la Web & MyBB DiegoPino 454 07-02-2018, 05:37 PM
Last Post: DiegoPino
Bug Update Info  MyBB 1.8.15 DiegoPino 694 03-20-2018, 09:50 PM
Last Post: DiegoPino
Exclamation Update Info  MyBB 1.8.14 DiegoPino 741 12-01-2017, 03:57 PM
Last Post: DiegoPino

Forum Jump:


Users browsing this thread: 1 Guest(s)