OCSInventory-NG/OCSInventory-ocsreports 2.12.6

OCS Inventory Server 2.12.6

on GitHub

The OCS Inventory Team is pleased to announce that our server version 2.12.6 has been released.

Security :

Web console :

• Fix some vulnerabilities by @charleneauger in #1697
  • Details :
    • Add check on del_check format to prevent non-numeric values
    • Add check on id format to prevent non-numeric values
    • Add check on deployment URL to prevent SSRF
    • Add checks on CSV file to prevent other file injection
    • Improve sanitization of notification HTML template

Communication server :

• Fix vulnerability by @charleneauger in OCSInventory-NG/OCSInventory-Server#491
  • Details :
    • Improve SQL duplicate query and check checksum value type