Forum GLPI-Project

francois-teclib

Expert GLPI

From: TECLIB

Registered: 2006-11-05

Posts: 74

Website

GLPI 9.5.7

This is a security release, upgrading is recommended

Non exhaustive list of changes:

• [SECURITY] SQL injection using custom CSS administration form [CVE-2022-21720]

• [SECURITY] Reflected XSS using reload button [CVE-2022-21719]

• FIX missing mail headers in mail collector rules engine (#10337)

• FIX infinite loop when collecting mail attachments with the same name (#9667)

• FIX zero height images in mail collector (#10109)

• FIX duplicate ranking when rules are ordered (#9888)

• FIX anonymous ticket creation (#10320)

• FIX project cloning (#9964)

• and more!

See full technical changelog for details.

---

Besoin d'un support professionnel pour GLPI ? Pensez à GLPI Network ! https://glpi-project.org/fr/tarifs/

Connaissez-vous l'offre Cloud maintenue et supportée par l'équipe qui édite GLPI ?
Vous pouvez tester gratuitement pendant 45 jours ! https://glpi-network.cloud (ou plus si besoin)