1.5.2
·
197 commits
to master
since this release
Bugfixes:
----------------------------
Fixed MySQL server has gone away error (#3759);
Security Fixes:
----------------------------
+ SQL injection in custom field enum/set types;
+ Directory traversal possible in RIPE query;
+ XSS (reflected) by /app/tools/subnet-masks/popup.php (#3738);
+ XSS (stored) in user widget settings;
+ XSS and LDAP injection in ad-search-group-result.php;