JSPWiki 2.4.104 released

Janne Jalkanen <[email protected]> Tue, 18 Sep 2007 09:05:29 +0300

Newsgroups	gmane.comp.java.jspwiki.user
Message-ID	<[email protected]>

Hi ho folks!

I have just released JSPWiki 2.4.104, which contains important  
security fixes.  Upgrading is recommended to everyone.  Here is the  
ChangeLog:

2007-09-13  Janne Jalkanen <[email protected]>

         * 2.4.104

         * Fixes several XSS vulnerabilities in Diff, PageInfo,
         Edit, Comment, Login, NewGroup, UserProfile and EditGroup.
         Thanks heaps to Jason Katzer for finding these!

         * Fixed a local path disclosure vulnerability in attachments.
         Thanks also to Jason Katzer!

JSPWiki 2.5.139-beta, also just released, contains the above fixes as  
well, in addition for a couple of new ones.  Folks, don't forget to  
escape your output!

/Janne