mybb MyBB 1.6.14 Released – Security & Maintenance Release

[AWS]

MyBB 1.6.14 is now available from the MyBB website and is a security and maintenance release.

What’s added/changed in this version?

This release fixes 5 vulnerabilities and 50 reported issues causing incorrect functionality of MyBB. Please be aware that to be able to provide easy to manage updates not all issues have been fixed in this version.

 

Vulnerabilities:

 

Medium Risk: Possibility of executing PHP code through settings – reported by http://community.mybb.com/user-84068.html" target="_blank]GiantCrocodile

Low Risk: A XSS vulnerability in polls.php – reported by http://community.mybb.com/user-84510.html" target="_blank]AntiPaste

Low Risk: A XSS vulnerability in portal.php – reported by http://community.mybb.com/user-84510.html" target="_blank]AntiPaste

Low Risk: Password protected forums can be viewed from the portal – reported by http://community.mybb.com/user-27579.html" target="_blank]Nathan Malcolm

Low Risk: Super moderators have more permissions than expected – reported by http://community.mybb.com/user-51459.html" target="_blank]JordanMussi

 

 

Bugs fixed:

 

https://github.com/mybb/mybb/issues?milestone=1&state=closed]Fixed issues in 1.6.14

https://github.com/mybb/mybb/issues?labels=1.6&state=open]Unfixed issues

 

 

 

Please view the http://docs.mybb.com/1614.html" target="_blank]1.6.14 changes on the Docs site for more information about the changes in this version.

http://pixel.wp.com/b.gif?host=blog.mybb.com&blog=36724248&post=2267&subd=blogdotmybbdotcom&ref=&feed=1

 

View the full article