GLPI v9.3.4 Release Notes
Release Date: 2019-04-11 // about 5 years ago-
๐ This is a security release, upgrading is highly recommended
Non exhaustive list of changes:
- ๐ [security] Bad chevrons rendering on dropdowns (#5468)
- ๐ [security] Iframe and forms are rendered in rich text contents (#5519)
- ๐ [security] Type juggling authentication bypass (#5520)
- ๐ [security] Malicious images upload (#5580)
- ๐ [security] Password token date was not reset (#5577)
- ๐ [security] Prevent timed attack and enforce cookie security (#5562)
- ๐ [security] Prevent external redirections
- And more!