Kunena 5.1.14 Released - Security release (13 Aug 2019)

The Kunena team is proud to announce the arrival of Kunena 5.1.14 [K5.1.14] which is now available for download as a native Joomla extension for Joomla 3.9.x. This version addresses most of the issues that were discovered in K 5.1 and issues discovered during the development stages of K 5.1.14. This update fixed 1 security issue.

Question Kunena 5.0.14 Released - Security Release

Start
Prev
1
Next
End

810
Topic Author
Offline
Kunena Developer

1 year 5 months ago - 1 year 5 months ago #1 by 810

Kunena 5.0.14 Released - Security Release was created by 810

The key distinctions of K 5.0.14 are:

XSS - High...

Introduction

The Kunena team has announce the arrival of Kunena 5.0.14 [K 5.0.14] which is now available for download as a native Joomla extension for J! 3.8.x. This version addresses most of the issues that were discovered in K 5.0 and issues discovered during the development stages of K 5.0. This is a Security release.

This will be the last K5.0.x version.

Last edit: 1 year 5 months ago by 810.

The following user(s) said Thank You: ssnobben

Please Log in or Create an account to join the conversation.

Sanity
Offline
New Member

1 year 5 months ago #2 by Sanity

Replied by Sanity on topic Kunena 5.0.14 Released - Security Release

Hello 810,

As the original reporter of this issue I have to tell you it has nothing to do with "XSRF".
The request requires an CSRF-Token so there is no exploiting with "XSRF".
This vulnerability should be higher categorized than "XSRF".

Best regards,
Sanity

Please Log in or Create an account to join the conversation.

810
Topic Author
Offline
Kunena Developer

1 year 5 months ago #3 by 810

Replied by 810 on topic Kunena 5.0.14 Released - Security Release

ok, changed.

Please Log in or Create an account to join the conversation.

ruud
Offline
Premium Member

1 year 5 months ago #4 by ruud

Replied by ruud on topic Kunena 5.0.14 Released - Security Release

download link for the language files points to the wrong package (kunena package instead of language package)

sharing = caring

Please Log in or Create an account to join the conversation.

810
Topic Author
Offline
Kunena Developer

1 year 5 months ago #5 by 810

Replied by 810 on topic Kunena 5.0.14 Released - Security Release

fixed

The following user(s) said Thank You: ruud

Please Log in or Create an account to join the conversation.

NeilT
Offline
Junior Member

1 year 5 months ago #6 by NeilT

Replied by NeilT on topic Kunena 5.0.14 Released - Security Release

The update is not showing within the Joomla update notice? Is this a manual update?

Please Log in or Create an account to join the conversation.

rich
Offline
Kunena Moderator

1 year 5 months ago - 1 year 5 months ago #7 by rich

Replied by rich on topic Kunena 5.0.14 Released - Security Release

Should be displayed, but you can it install also via the Joomla installer.

Last edit: 1 year 5 months ago by rich.

Please Log in or Create an account to join the conversation.

810
Topic Author
Offline
Kunena Developer

1 year 5 months ago #8 by 810

Replied by 810 on topic Kunena 5.0.14 Released - Security Release

Its the cache of the browser, on the dashboard of joomla. Do ctrl + f5
this will recheck the updates.

Please Log in or Create an account to join the conversation.

Start
Prev
1
Next
End

Forum Access

Not Allowed: to create new topic.
Not Allowed: to reply.
Not Allowed: to edit your message.

Time to create page: 0.080 seconds