ExpressionEngine vulnerability
News and General
During a recent audit, this vulnerability came up with respect to Expression Engine with versions prior to 7.2.6. Can you tell me if this can be has been resolved in EE6? We plan to upgrade to 7 soon but I need to respond to the audit committee on this.
https://www.cvedetails.com/vulnerability-list/vendor_id-7662/Expressionengine.html
Hi Melissajc,
Thanks for getting in touch about this, as well as the link.
Assuming your referencing CVE-2023-22953, this issue is not (and was not) present in EE 6.x.
Thanks,
-Tom Jaeger
Thanks Tom. That was the issue I was referencing. I thought my link went right to that, sorry. And thanks for the quick reply.
All good! No Problem!
Happy to share more if needed on the specifics as well!
Cheers!
-Tom