Released 2x XenForo 2.1.11 Released | XenForo 2.1.11 Released null | Add-ons Released


Cộng Sự Đặc Biệt
Thành viên BQT
Tham gia
Bài viết
Được Like
XenForo 2.1.11 Released | XenForo 2.1.11 Released null | Add-ons Released

Today, we are releasing XenForo 2.1.11 to address a potential security vulnerability. We recommend that all customers running XenForo 2.1 upgrade to 2.1.11 or use the attached patch file as soon as possible. (For customers running XenForo 2.0, we can only recommend upgrading to the latest version.)

The issue is a cross site request forgery (CSRF) on the login form. This may allow an attacker to unexpectedly log users into an attacker-controlled account. In some scenarios, this may cause privacy concerns if users take certain actions while logged into the incorrect account. Note that this does not give an attacker any access to the user's true account.

Applying a patch manually

Download the patch in the file attached to this message. It will contain the following files:
  1. src/XF/Admin/Controller/Login.php
  2. src/XF/Pub/Controller/Login.php
Extract the zip file to your computer and upload the contents to the root of your XenForo installation. This should overwrite the files on your server with the new version.

Note: If you decide to patch the files instead of doing a full upgrade, your "File health check" will report these three files as having "Unexpected contents". Because these files no longer contain the same contents your version of XF was shipped with, this is expected and can be safely ignored.

Current Requirements

Please note that XenForo 2.1.x has higher system requirements than XenForo 1.x.

The following are minimum requirements:
  • PHP 5.6 or newer (PHP 7.4 recommended)
  • MySQL 5.5 and newer (Also compatible with MariaDB/Percona etc.)
  • All of the official add-ons require XenForo 2.1.
  • Enhanced Search requires at least Elasticsearch 2.0.

Đính kèm

    12.4 MB · Lượt xem: 137
    12.4 MB · Lượt xem: 47

Hướng dẫn sử dụng

XenForo 1 XenForo 2
Translate by PVS

Hosting Giá rẻ

hosting free
hosting free
Top Bottom