bookstack/website
Fork 4
Code Issues 5 Pull requests Activity

Added 30.4 update notes to updates page

Browse source
This commit is contained in:
Dan Brown 2020-10-31 16:48:34 +00:00
commit c0ab06ac75
Signed by: danb
GPG key ID: 46D9F943C24A2EF9
1 changed files with 5 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
content/docs/admin/updates.md
View file

@ -32,7 +32,11 @@ Check the below list for the version you are updating to for any additional inst
## Version Specific Instructions
#### Updated to v0.30 or higher
#### Updating to v0.30.4 or higher
**Security** - v0.30.4 fixes a couple of XSS vulnerabilities that could be exploited by untrusted users via page content and page link attachments. Please see the [blog release page for more details](/blog/beta-release-v0-30-4/).
#### Updating to v0.30 or higher
**Security** - Possible Privilege Escalation. During the v0.30 release cycle
it was advised that current privilege escalation situations are not made clear when applying role permissions.