[INVISION COMMUNITY INSIDER] Security update for Invision Community 5

[NewsBot]

We've released a security update for Invision Community 5.0.7 for those using Invision Community Classic.

We recommend that all those using Invision Community Classic update using the AdminCP as soon as possible. To do this, log into your AdminCP, head to System > Support and apply the patch from the top left box.

Please note that Invision Community Cloud and Enterprise customers already have this security update applied.

What does this update do?

The update fixes a security vulnerability with the theme editor. This issue was reported to us by Egidio Romano from Karma(In)Security. We thank Egidio for reporting this issue to us.

I'm using the self hosted version (Invision Community Classic) on a version older than 5.0.7, what should I do?

You can upgrade to 5.0.7 via the AdminCP. Follow the instructions in the banner to upgrade to the latest version which has been updated to include the security update.

I'm using the self hosted version (Invision Community Classic) who upgraded to 5.0.7 previous to this announcement, what should I do?

You can use the patch system as described at the top of this post.

I'm using Invision Community Cloud, what should I do?

You don't need to do anything. All packages except Invision Community Classic are already protected even if you're not on the latest version.

If you have any questions, let me know!

Wyświetl pełną treść wpisu