Known Issues of TWiki 4.3.x Production Releases

These are known issues of TWiki-4.3.0, TWiki-4.3.1 and TWiki-4.3.2, code named GeorgetownRelease.

The latest TWiki release is available at DownloadTWiki.

Security Alerts

• Security Alert L1: Remote Perl code execution with query string to debug TWiki plugins
  • Fix available in SecurityAlert-CVE-2014-7236, fixed in TWiki-6.0.1
• Security Alert L1: Apache configuration file upload on TWiki on Windows server
  • Fix available in SecurityAlert-CVE-2014-7237, fixed in TWiki-6.0.1
• Security Alert L1: MAKETEXT variable allows arbitrary shell command execution
  • Fix available in SecurityAlert-CVE-2012-6329, fixed in TWiki-5.1.3
• Security Alert L3: XSS Vulnerability with topic create and slideshows
  • Fix available in SecurityAlert-CVE-2011-3010, fixed in TWiki-5.1.0
• Security Alert L3: XSS Vulnerability with origurl parameter of login script
  • Fix available in SecurityAlert-CVE-2011-1838, fixed in TWiki-5.0.2
• Security Alert L3: XSS Vulnerability with rev parameter & login script
  • Fix available in SecurityAlert-CVE-2010-3841, fixed in TWiki-5.0.1
• Security Audit L3: Crypt token based fix for cross-site request forgery vulnerability
  • Details in SecurityAuditTokenBasedCsrfFix, fixed in TWiki-4.3.2
• Security Alert L2: Cross-site request forgery vulnerability with image tag
  • Fix available in SecurityAlert-CVE-2009-1339, fixed in TWiki-4.3.1

• Note: See other TWikiSecurityAlerts

Release TWiki-4.3.2

Major issues

Minor issues

Fixed in	Description
	TWikibug:Item6333 - The TWikiDrawPlugin does not work if {CryptToken}{Enable} is set

Release TWiki-4.3.1

Major issues

Minor issues

Release TWiki-4.3.0

Major issues

Minor issues

Bug reports

Please visit the bugs web to review and report bugs.

-- Contributors: PeterThoeny - 30 Mar 2009

Discussion

Found a bug? Fill in a report in the bugs web.

Need support? Ask your questions in the Support web, but only after reviewing the support guidelines :-)