libretic
/
etherpad-lite
5
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Include CVE #

This commit is contained in:
John McLear 2018-04-07 10:13:09 +01:00
parent c34350f307
commit 0132f4d1da
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
CHANGELOG.md
View File

@ -1,8 +1,8 @@
# 1.6.4
* SECURITY: exploitable /admin access
* SECURITY: DoS with pad exports
* SECURITY: Remote Code Execution
* SECURITY: Pad data leak
* SECURITY: exploitable /admin access - CVE-2018-9845
* SECURITY: DoS with pad exports - CVE-2018-9327
* SECURITY: Remote Code Execution - CVE-2018-9326
* SECURITY: Pad data leak - CVE-2018-9325
* Fix: Admin redirect URL
* Fix: Various script Fixes
* Fix: Various CSS/Style/Layout fixes
@ -10,7 +10,7 @@
* NEW: Hook: onAccessCheck
* NEW: SESSIONKEY and APIKey customizable path
* NEW: checkPads script
* NEW: Support "cluster mode"
* NEW: Support "cluster mode"
# 1.6.3
* SECURITY: Update ejs