Security Issues
Posted: 17 Apr 2023, 13:12
by ancorn
A few security vulnerabilities have just been discovered in the Opencats project, but currently, I do not know how to contact the developers.
I'm not sure if the moderator can help me.
Re: Security Issues
Posted: 17 Apr 2023, 14:41
by RussH
Hi Ancorn,
there are a few (already known) exploits on internal pages that required a valid username / password to exploit. The exploits are for version 0.9.7. These are already documented in the Security.MD file in the github repository.
https://github.com/opencats/OpenCATS/bl ... ity.MD#xss
These should all be addressed with the most current release 0.9.7.2. Please test, report any issues in the github repository or email me -
russh@opencats.org.