tocsin

CVE-2020-26253

2 advisories.

Packagist/getkirby/panel CVE-2020-26253: medium 6.8

Kirby .dev domains and some reverse proxy setups were treated as local

Action: Upgrade getkirby/panel to 2.5.14 or later.

composer require getkirby/panel:2.5.14

Affected

introducedfixedlast affected
02.5.14-

Fixed versions

2.5.14

Sources

CVE-2020-26253 · published · modified · JSON

Packagist/getkirby/cms CVE-2020-26253: medium 6.8

Kirby .dev domains and some reverse proxy setups were treated as local

Action: Upgrade getkirby/cms to 3.3.6 or later.

composer require getkirby/cms:3.3.6

Affected

introducedfixedlast affected
3.0.03.3.6-

Fixed versions

3.3.6

Sources

CVE-2020-26253 · published · modified · JSON