[ancorn]

A few security vulnerabilities have just been discovered in the Opencats project, but currently, I do not know how to contact the developers.

I'm not sure if the moderator can help me.

[RussH]

Hi Ancorn,

there are a few (already known) exploits on internal pages that required a valid username / password to exploit. The exploits are for version 0.9.7. These are already documented in the Security.MD file in the github repository.
https://github.com/opencats/OpenCATS/bl ... ity.MD#xss

These should all be addressed with the most current release 0.9.7.2. Please test, report any issues in the github repository or email me - russh@opencats.org.

[RussH]

all open vulnerabilities are addressed, in the master branch and also in the php 8.2 feature branch.

Master commits: https://github.com/opencats/OpenCATS/commits/master/

PHP 8.2 commits: https://github.com/opencats/OpenCATS/co ... 8.2_compat