Released 2x XenForo 2.0.11 Released (Security Fix)

PVS

Super Moderator
Thành viên BQT
Tham gia
28/02/2015
Bài viết
16,830
Được Like
12,704
XenForo 2.0.11 Released (Security Fix)

Today, we are releasing XenForo 2.0.11 to address a potential security vulnerability. We recommend that all customers running XenForo 2.0 upgrade to 2.0.11 or use the attached patch file as soon as possible.

The issue is a XSS vulnerability. XSS (Cross Site Scripting) issues allow scripts and malicious HTML to be injected into the page, potentially allowing data theft or unauthenticated access.

Specifically, the issue relates to specially crafted text entered into messages and output using the structured text system (used in profile posts and comments).

There are no other fixes included in this version. There will be a further maintenance release in the coming weeks.

Applying a Fix: Upgrading
You may upgrade to 2.0.11 to fix this issue. You should upgrade as you would to any other release.

Customers with an active license may download 2.0.11 from their customer area. Full details for how to install and upgrade XenForo can be found in the XenForo Manual.

Applying a Fix: Patching
Alternatively, this issue can be fixed by applying the patch in the attached file. You should simply overwrite the following file with the version attached to this message:
  • src/XF/Str/Formatter.php
The file can be found at the same path within the attachment.
 

Đính kèm

  • xf-patch-2011.zip
    5.9 KB · Lượt xem: 36
  • Like
Reactions: THB

hacobi1102

MasterCorporal
Tham gia
10/03/2016
Bài viết
356
Được Like
166
Lại phải tự tạo file hash.json hả bro =.=
 

Hướng dẫn sử dụng

XenForo 1 XenForo 2
Translate by PVS

Dịch vụ XenForo của VNXF

Telegram: anhanhxf

Chỉ nhận web nội dung lành mạnh

Nhà Tài Trợ

Mút Xốp Không Gian
Mút Sofa Không Gian
Top Bottom