Vulnerability in EPiServer.Forms

Try our conversational search powered by Generative AI!

AI OnAI Off
Products
Packages [expand] [collapse]
Services
Released in version
All versions
12.20.0
12.19.1
12.19.0
12.18.0
12.17.1
12.17.0
12.16.0
12.15.1
12.15.0
12.14.0
12.13.1
12.13.0
12.12.1
12.11.0
12.10.0
12.9.3
12.9.2
12.9.1
12.9.0
12.8.0
12.7.0
12.6.0
12.5.0
12.4.2
12.4.1
12.4.0
12.3.0
12.2.0
12.1.1
12.1.0
12.0.4
12.0.3
11.21.2
11.21.1
11.21.0
11.20.17
11.20.16
11.20.15
11.20.14
11.20.12
11.20.11
11.20.10
11.20.9
11.20.8
11.20.7
11.20.6
11.20.5
11.20.4
11.20.3
11.20.2
11.20.1
11.20.0
11.19.0
11.18.1
11.17.0
11.16.0
11.15.1
11.15.0
11.14.2
11.14.1
11.14.0
11.13.2
11.13.1
11.13.0
11.12.0
11.11.3
11.11.2
11.11.1
11.11.0
11.10.6
11.10.5
11.10.4
11.10.3
11.10.2
11.10.1
11.10.0
11.9.4
11.9.3
11.9.2
11.9.1
11.9.0
11.8.1
11.8.0
11.7.1
11.7.0
11.6.0
11.5.4
11.5.3
11.5.2
11.5.1
11.5.0
11.4.0
11.3.4
11.3.3
11.3.2
11.3.1
11.3.0
11.2.1
11.2.0
11.1.0
10.10.5
10.10.4
10.10.3
10.10.2
10.10.1
10.10.0
10.9.2
10.9.1
10.9.0
10.8.0
10.7.0
10.6.0
10.5.0
10.4.3
10.4.2
10.4.1
10.4.0
10.3.2
10.3.1
10.3.0
10.2.0
10.1.0
10.0.1
9.12.5
9.12.4
9.12.3
9.12.2
9.12.1
9.12.0
9.11.0
9.10.2
9.10.1
9.10.0
9.9.1
9.9.0
9.8.3
9.8.2
9.8.1
9.8.0
9.7.3
9.7.2
9.7.1
9.7.0
9.6.1
9.6.0
9.5.1
9.5.0
9.4.0
9.3.3
9.3.2
9.3.1
9.3.0
9.2.1
9.2.0
9.1.0
9.0.3
9.0.2
9.0.1
9.0.0
8.11.0
8.10.1
8.10.0
8.9.0
8.8.2
8.8.1
8.8.0
8.7.0
8.6.0
8.5.0
8.4.0
8.3.0
8.2.0
8.1.0
8.0.0
7.19.2
7.19.1
7.19.0
7.18.0
7.17.0
7.16.1
7.16.0
7.15.0
7.14.2
7.14.1
7.14.0
7.13.3
7.13.2
7.13.1
7.13.0
7.11.0
7.10.0
7.9.1
7.9.0
7.8.2
7.8.1
7.8.0
7.7.1
7.7.0
7.6.5
7.6.4
7.6.3
7.6.2
7.6.1
7.6.0
7.5.1003.0
7.5.1002.0
7.5.1000.0
7.5.440.0
7.5.409.0
7.5.402.0
7.5.394.2
7.0.586.24
7.0.586.16
7.0.586.8
7.0.586.4
7.0.586.1
6.1.379.0

Release notes for Optimizely CMS and Customized Commerce updates

This topic lists Optimizely updates, delivered as NuGet packages and services. You decide which updates apply to your project.

Select a product, package, or service in the left menu, and then select one of the following filters from Item type and click Filter.

  • Bug – Display bug fixes.
  • Critical bug – Display only critical bug fixes.
  • Feature –  Display only new features (all features).
  • UI Feature – Display only end-user (user interface) features.

Note: NuGet packages listed here may not be immediately available in the Optimizely NuGet feed.

Latest changes

Item type
Filter on date
Items/Page
Clear filters
Area ID Type Description Released
CMS-30668
  Simultaneously access to lazy-loaded contentarea can cause readonly exceptions

Fixed an issue that caused a NotSupportedException (saying that a property is read-only) when a contentArea was lazy-loaded and then accessed simultaneously by two different threads.

EPiServer.CMS.Core 12.20.0;
Nov 28, 2023
CMS-30651
  Scheduled jobs running more frequently than expected

Fixed an issue that ran a job more frequently than the schedule that was set for the job.

Note: This issue happened more frequently when there were multiple instances. Another possible workaround in DXP is to run a scheduler instance so that scheduled jobs are not running on multiple instances.

EPiServer.CMS.Core 12.20.0;
Nov 28, 2023
CMS-30663
  Clearing a block in a block list breaks edit UI

Fixed an issue that caused the edit UI to break when you cleared a block in a block list.

Prerequisite

Add block types as following to the site (such as the Alloy sample site):
[ContentType]public class AccordionBlock : BlockData

{{{ public virtual string? Title

{ get; set; } public virtual IList<AccordionItemBlock>? Items { get; set; }}}
}
{{[ContentType]public class AccordionItemBlock : BlockData{ public virtual string? Title{ get; set; }

}}

{{public virtual string? Subtitle { get; set; } public virtual XhtmlString? Body{ get; set; }}}
}

Steps to reproduce

  1. Enable inline blocks for the site (UIOptions.InlineBlocksInContentAreaEnabled = true).
  2. Create a new instance of Accordion Block against a page as an inline block.
  3. Add three child items into AccordionBlock.Items with each item having values in every property.
  4. Save the block.
  5. Save and publish the page.
  6. Refresh the page.
  7. Edit the Accordion block.
  8. Expand the second child item.
  9. Remove the text from every property within the second child item.
  10. Save the block, and save and publish the page. At this point you, a null reference exception displays because of the lack of null handling in the aforementioned CMS code.
  11. Refresh the page in the browser. Note that the page does not load in the browser.
  12. Check the network settings and see a 500 error response on the API call to get the page data. 
EPiServer.CMS.Core 12.20.0;
Nov 28, 2023
CMS-28298
  Copy content has scheduled versions does not change to draft

Fixed an issue that did not copy both versions of a page in Draft status.

If you created a new page (pageA) with 2 versions corresponding to 2 languages: Version1 in EN language (master) and Version2 in SV language (non-master); both versions are in Scheduled for publish status. When you tried to copy the newly created page to another location, PageA copied to new location with 2 versions but Version1 was in Draft status and Version2 was in Scheduled for publish status.

 

EPiServer.CMS.Core 12.19.1;
Oct 24, 2023
CMS-30347
  Cache might serve stale content

Fixed an issue where caching may serve outdated content, even after content was republished. This situation arose when a content item remained untouched for the expiration period (default 12 hours) and is then was accessed before ASP.NET Core initiates a scan of expired items (default maximum 60s after expiration). 

The cache duration for content was reduced to 1 minute when content was loaded in a scheduled job, thereby increasing the likelihood of this occurring for longer running jobs that triggers multiple reloads of content from the database.

Known workarounds:

  • Restarting the instance fixes the problem.
  • Call IContentCacheRemover.RemoveLanguage in a scheduled job to remove a specific language from the cache.
  • Using ContentCacheScope in a scheduled job to increase the expiration to cover the length of the job.
EPiServer.CMS.Core 12.19.1;
Oct 24, 2023
CMS-30371
  Add override MapContent to Mapped Identity Service

Fixed an issue where the wrong asset was chosen when picking an asset from Optimizely Content Marketing Platform (CMP). If contents were imported with CMP Digital Asset Manager (DAM) package, you should run the following script. 

UPDATE [dbo].[tblMappedIdentity]
   SET [ExistingContentId] = NULL
 WHERE [ExistingContentId] IS NOT NULL AND [Provider] = 'dam'

 

EPiServer.CMS.Core 12.19.1;
Oct 24, 2023
CMS-30120
  List of block that contains ContentReference is duplicated data when copy and pasted

Fixed an issue that pasted two items of a ListPropertyBlock when you copied a page that had only one item in the ListPropertyBlock.

EPiServer.CMS.Core 12.19.1;
Oct 24, 2023
CMS-30079
  Duplicate LanguageBranches for same content cause site startup failure

Fixed an issue that cause a site failure if you had two LanguageBranches yi and yid which both resolved to same CultureInfo.Name ('yi'). The exception said, The source argument contains duplicate keys.

EPiServer.CMS.Core 12.19.1;
Oct 24, 2023
CMS-30439
  Email links might get resolved as links to the startpage

Fixed an issue that misinterpreted an email address as the host definition. For example, someone@optimizely.com was misinterpreted to optimizely.com.

EPiServer.CMS.Core 12.19.1;
Oct 24, 2023
CMS-30068
  Changes to block in culture specific list property might empty data in other language versions

Fixed the loss of images on language versions of a page when you made changes to a block in culture-specific list property.

EPiServer.CMS.Core 12.19.0;
Oct 04, 2023
1 2 3 4 5 6 Next