Security issue on the forum

Questions about the forums? Got a suggestion on how things can be improved? Post here!
Post Reply
User avatar
Ron2K
Forum Technical Administrator
Posts: 9050
Joined: 04 Jul 2006, 16:45
Location: Upper Hutt, New Zealand
Contact:

Security issue on the forum

Post by Ron2K »

Hi guys,

Unfortunately, I received notification of a security issue affecting the forum. The issue was with the [flash] BBCode tag - on browsers using the WebKit rendering engine (Chrome and Safari) as well as the Opera browser, the [flash] tag could have been used to execute Javascript, thereby causing a cross site scripting vulnerability.

I've just finished patching this up, and also upgraded the forum to the recently released 3.0.8 version at the same time. If you notice anything broken, please notify me via private message ONLY.

Apologies for any inconvenience the sudden and unannounced downtime may have caused.
Kia kaha, Kia māia, Kia manawanui.
User avatar
KatrynKat
Insane in the Membrane
Posts: 24490
Joined: 18 Jul 2010, 17:42
Location: In my BDSM dungeon - aka Lockdown

Re: Security issue on the forum

Post by KatrynKat »

my hero!!! :hug:

thank you for all that you do.....

now... go get to bed!!! ;)
"This eBook is displayed using 100% recycled electrons."
Anthro
Moderator Emeritus
Posts: 5547
Joined: 21 Dec 2002, 02:00
Processor: i7 3770k
Motherboard: ASUS P8P67-Pro
Graphics card: 2xNvidia GTX670
Memory: 16 GB Gskill Sniper
Location: In SQL Space inserting 'null' on purpose
Contact:

Re: Security issue on the forum

Post by Anthro »

As always, Kudos Ron - shot for the chat m8 ;)
Temporary Absence
Anakha56
Forum Administrator
Posts: 22136
Joined: 14 Jun 2004, 02:00
Processor: Ryzen 1700K
Motherboard: Asus X370
Graphics card: Asus 1060 Strix
Memory: 16GB RAM
Location: Where Google says

Re: Security issue on the forum

Post by Anakha56 »

sheesh you people need to get out more. At 11pm you are wondering why the forums are down? *shakes head*




:P



Oh and thanks Ron :P.
JUSTICE, n A commodity which is a more or less adulterated condition the State sells to the citizen as a reward for his allegiance, taxes and personal service.
User avatar
Tribble
Registered User
Posts: 88465
Joined: 08 Feb 2007, 02:00
Processor: Intel Core i7-4770K CPU@3.50GHz
Motherboard: ACPI x64-based PC
Graphics card: GeForce GTX 780 Ti
Memory: 16GB
Location: Not here
Contact:

Re: Security issue on the forum

Post by Tribble »

Yep - I was sleeping while you worked - but thank you. Goes to show that the Fox is the safest browser to use ;-) <dig>
Image
Post Reply