CMS MADE SIMPLE FORGE

Minify

 

[#9916] Serious vulnerability

avatar
Created By: Rolf (rolf1)
Date Submitted: Fri Mar 21 08:46:45 -0400 2014

Assigned To: Mike Crowe (drmikecrowe)
Version: 0.9.5
CMSMS Version: 1.11.10
Severity: Major
Resolution: None
State: Open
Summary:
Serious vulnerability
Detailed Description:
Source: https://code.google.com/p/minify

"News 2013-07-23 Minify 2.1.7 is released in response to a serious vulnerability
discovered in all previous versions. You are strongly urged to follow the
instructions in the report to secure your installation, and to upgrade to Minify
2.1.7."

According to the help text the Minify module 0.9.5 still uses Minify 2.1.5 and
that makes the websites using it prone to hacks! Please update the module.

Thanks, Rolf


History