January 2025 - Koha-bugs - lists.koha-community.org

[Bug 38470] Subscription detail page vulnerable to reflected XSS
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '25

14 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38470 --- Comment #11 from Katrin Fischer <katrin.fischer(a)bsz-bw.de> --- Pushed for 25.05! Well done everyone, thank you! -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38470] Subscription detail page vulnerable to reflected XSS
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '25

14 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38470 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Passed QA |Pushed to main Version(s)| |25.05.00 released in| | -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38468] Staff interface detail page vulnerable to reflected XSS
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '25

14 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38468 --- Comment #12 from Katrin Fischer <katrin.fischer(a)bsz-bw.de> --- Pushed for 25.05! Well done everyone, thank you! -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38468] Staff interface detail page vulnerable to reflected XSS
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '25

14 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38468 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Version(s)| |25.05.00 released in| | Status|Passed QA |Pushed to main -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 37727] CVE-2024-24337 - Fix CSV formula injection - client side (DataTables)
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '25

14 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37727 --- Comment #20 from Katrin Fischer <katrin.fischer(a)bsz-bw.de> --- Pushed for 25.05! Well done everyone, thank you! -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 37727] CVE-2024-24337 - Fix CSV formula injection - client side (DataTables)
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '25

14 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37727 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Version(s)| |25.05.00 released in| | Status|Passed QA |Pushed to main -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 37727] CVE-2024-24337 - Fix CSV formula injection - client side (DataTables)
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '25

14 Jan '25

1 0

[Bug 38468] Staff interface detail page vulnerable to reflected XSS
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '25

14 Jan '25

1 0

[Bug 38470] Subscription detail page vulnerable to reflected XSS
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '25

14 Jan '25

1 0

[Bug 38869] New: Keep previous versions of Notices/Slips
by bugzilla-daemon＠bugs.koha-community.org 14 Jan '25

14 Jan '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38869 Bug ID: 38869 Summary: Keep previous versions of Notices/Slips Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Notices Assignee: koha-bugs(a)lists.koha-community.org Reporter: dcook(a)prosentient.com.au QA Contact: testopia(a)bugs.koha-community.org It would be very interesting to be keep a version history for Notices/Slips. I imagine there must be lots of libraries that curse saving a new version of a Notice/Slip only to realise that they've horribly broken it? It would be especially useful with bug 11583 -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 8