Released XenForo 2.0.9 Released (Security Fix)

THB

Founder
Thành viên BQT
Tham gia
25/02/2015
Bài viết
6,651
Được Like
3,933
XenForo 2.0.9 Released (Security Fix)
XenForo 2.0.8 Released (Security Fix)
Bản vá lỗi.
No, you're not imagining it - we are doing another release, just a day after the release of 2.0.8.
XenForo 2.0.9 fixes a flaw that could potentially be exploited to create a cross-site scripting vulnerability. We recommend that all customers running XenForo 2.0 upgrade to 2.0.9 or use the attached patch file as soon as possible. Note that if you are applying the patch rather than doing a full upgrade to 2.0.9, you will need to apply the 2.0.8 patch too.

XenForo extends thanks to Thomas Schneider for identifying the issue.

The issue is a XSS vulnerability. XSS (Cross Site Scripting) issues allow scripts and malicious HTML to be injected into the page, potentially allowing data theft or unauthenticated access.

admin.jpg

Applying a Fix: Upgrading
You may upgrade to 2.0.9 to fix this issue. You should upgrade as you would to any other release.

Customers with an active license may download 2.0.9 from their customer area. Full details for how to install and upgrade XenForo can be found in the XenForo Manual.

Applying a Fix: Patching
Alternatively, this issue can be fixed by applying the patch in the attached file. You should simply overwrite the following file with the version attached to this message:

  • src/XF/Template/Templater.php
The file can be found at the same path within the attachment.
 

Đính kèm

  • xf-patch-208.zip
    6.2 KB · Lượt xem: 44
  • xf-patch-209.zip
    30.2 KB · Lượt xem: 92

nvtrung13

Private
Tham gia
21/10/2015
Bài viết
10
Được Like
5
Bản xenforo 2.0.9 xenforo chưa tích hợp thêm chức năng redirect link nhỉ
 
  • Like
Reactions: THB

secpol

MasterCorporal
Tham gia
10/06/2016
Bài viết
223
Được Like
135
Cách Applying như nào nhỉ?
 
  • Like
Reactions: THB

huynhvantam123

Corporal
Tham gia
28/08/2018
Bài viết
164
Được Like
43
mong hướng dẫn cách dùng với anh ơi. Tải về giải nén và chép đè vào thư mục rồi mà không thấy có thông báo hay gì hết
 

Top Bottom