##// END OF EJS Templates
u » ewong » rhodecode-enterprise-ce-fork
RSS

Fork of rhodecode-enterprise-ce

ip-restritions: fix issue with loading empty IP rules for non-logged not-anonymous users....
ip-restritions: fix issue with loading empty IP rules for non-logged not-anonymous users. This case won't have any IP rules set. And we accidentally loaded them becuase of no empty user filter was present. This caused some odd display warnings for users.
marcink - - Load All Authors

File last commit:

r2665:f42f8690 stable
r2838:d1dcf373 default
Show More
release-notes-4.11.6.rst
41 lines | 489 B | text/x-rst | RstLexer
/ docs / release-notes / release-notes-4.11.6.rst
History | Annotation | Raw |Copy content |Copy permalink

|RCE| 4.11.6 |RNS|

Release Date

  • 2018-03-28

New Features

General

Security

  • api(high): fixed unauthorized access to repositories using forged api requests.

Performance

Fixes

Upgrade notes

  • Unscheduled security release addressing found vulnerability in the API that allows attackers to gain access to repositories in unauthorized way by forging data in the API request.