Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

remove xmpcore from lucee core

Description

the image extension did bundle a newer version 6.1.1, core bundles 5.1.2

5.1.2 has a XXE CVE

Environment

None

Activity

Show:

Zac Spitzer 19 May 2023 at 14:31

Zac Spitzer 19 May 2023 at 14:21

Zac Spitzer 14 May 2023 at 08:31
Edited

6.0

Zac Spitzer 12 May 2023 at 06:46

Fixed

Details

Assignee

Reporter

Priority

Labels

Fix versions

New Issue warning screen

Before you create a new Issue, please post to the mailing list first https://dev.lucee.org

Once the issue has been verified, one of the Lucee team will ask you to file an issue

Sprint

Created 12 May 2023 at 06:42
Updated 19 July 2023 at 13:26
Resolved 20 May 2023 at 11:11