Skip to content

Security fixes

Fixes for the following security issues:

  • CVE-2022-27256: Open redirect via rpath query param.
  • CVE-2022-27258: XSS via rpath query param.
  • CVE-2022-27257: LFI in Redbasic theme.
Edited by Harald Eilertsen

Merge request reports