invision community IP.Content 2.3.x Security Update

[AWS]

We are releasing a patch for IP.Content 2.3.6 to address a potential security vulnerability in the search system.

 

It has been brought to our attention that there is a potential vulnerability within the IP.Content search system and even though the vulnerability was only a proof of concept, we felt it best to issue an update.

 

To apply the patch

Simply download the attached zip and upload the files to your forum server. You do not need to run any scripts or the upgrade system.

 

Credit

Our thanks to security researcher Jamieson O'Reilly (https://www.invisionpower.com/clients/index.php?app=nexus&module=support&section=redirect&url=http%3A%2F%2Fau.linkedin.com%2Fpub%2Fjamieson-o-reilly%2F70%2Fb64%2F13a%2F&key=8915687b3c24435098040afac2b41f8e647bb21c&resource=' au.linkedin.com/pub/jamieson-o-reilly/70/b64/13a/, https://www.invisionpower.com/clients/index.php?app=nexus&module=support&section=redirect&url=http%3A%2F%2Fdringen.blogspot.com.au&key=e59c27a8b5acc41ec1577852a79bd308c2e611d9&resource=' dringen.blogspot.com.au) for his assistance with this issue.

 

http://community.invisionpower.com/index.php?app=core&module=attach&section=attach&attach_id=58972" http://community.invisionpower.com/filestore/public/style_extra/mime_types/zip.gif" alt="Attached File" />

;http://community.invisionpower.com/index.php?app=core&module=attach&section=attach&attach_id=58972" ip_content_patch_july_2014.zip ; ;7.1KB

; ;

Edited January 17, 2016 by Forum²