Znuny 7.0.17 (2024-04-17)

This release contains security and bug fixes.

Type

Patchlevel

Security

Yes

Changes

Fixed security issue with JavaScript in body of article being executed in customer ticket zoom (CVE-2024-32492). Thanks to Martino Spagnuolo for reporting this issue.
Fixed security issue with uploaded files that could be used for remote code execution (CVE-2024-32491). Thanks to Martino Spagnuolo for reporting and providing the fix.
Fixed SQL injection issue when using the draft functionality (CVE-2024-32493). Thanks to Martino Spagnuolo for reporting the issue.

Read about all changes in the CHANGELOG.md. See the commits on GitHub for a list of all changes.

Download