github froxlor/Froxlor 2.0.10
Security Release 2.0.10

latest releases: 2.1.9, 2.1.8, 2.1.7...
17 months ago
  • enforce password requirements set in settings for directory-protection
    [CWE-521: Weak Password Requirements]
  • add missing use statement for error-reporting to include the dbms version
    [CWE-391: Unchecked Error Condition]
  • validate existence of language in admin-templates
    [CWE-840: Business Logic Errors]
  • verify cronjob interval is one of the fixed available values
    [CWE-96: Static Code Injection]
  • fix possible privilege escalation from customer to root when specifying custom error documents in directory-options
    [CWE-94: Code Injection]

Full Changelog: 2.0.9...2.0.10

Don't miss a new Froxlor release

NewReleases is sending notifications on new releases.