New
Icinga Web Version 2.12.4
What's New in Version 2.12.4
This is a hotfix release which fixes the following issue:
Database login broken after upgrade #5343
The following are the release notes of version 2.12.3 released earlier today. Included to keep them visible.
What's New in Version 2.12.3
Notice: This is a security release. It is recommended to upgrade immediately.
You can find all issues related to this release on our Roadmap.
Vulnerabilities, Closed
Cross site scripting is one of the worst attacks on web based platforms. Especially, if carrying it out is as easy as the first two mentioned here. You might recognize the open redirect on the login. You are correct, we attempted to fix it already with v2.11.3 but underestimated PHP's quirks. The last is difficult to exploit, hence the lowest severity of all, but don't be fooled by that!