Vulnerability in EPiServer.Forms

Try our conversational search powered by Generative AI!

AI OnAI Off
Products
Packages [expand] [collapse]
Services
Released in version
All versions
5.2.1
5.2.0
5.1.0
5.0.0
4.1.0
4.0.0
3.5.0
3.4.0
3.3.0
3.2.0
3.1.0
3.0.0
2.0.0.2
1.1.4.9000
1.0.0.9000
0.21.1.9000
0.20.0.9000
0.19.4.9000

Release notes for Optimizely CMS and Customized Commerce updates

This topic lists Optimizely updates, delivered as NuGet packages and services. You decide which updates apply to your project.

Select a product, package, or service in the left menu, and then select one of the following filters from Item type and click Filter.

  • Bug – Display bug fixes.
  • Critical bug – Display only critical bug fixes.
  • Feature –  Display only new features (all features).
  • UI Feature – Display only end-user (user interface) features.

Note: NuGet packages listed here may not be immediately available in the Optimizely NuGet feed.

Latest changes

Item type
Filter on date
Items/Page
Clear filters
Area ID Type Description Released
AFORM-3678
  Form service API should not use custom exception filter for all exceptions

Fixed an issue that used a custom exception filter for all exceptions.

EPiServer.Forms.ServiceApi 5.2.1;
Nov 28, 2023
AFORM-3411
  Method to delete form submission should be DELETE method

Fixed an issue that used the POST method to delete instead of the DELETE method.

EPiServer.Forms.ServiceApi 5.2.0;
Aug 31, 2023
AFORM-3412
  The SubmissionIds should be verified when deleting form submissions

Fixed an issue that returned 200 OK status when you deleted a form submissions with an invalid SubmissionId. A 404 Not Found status and warning should have appeared.

 

EPiServer.Forms.ServiceApi 5.2.0;
Aug 31, 2023
AFORM-3017
  Convert Episerver.Form.ServiceApi to .net 6

Forms Service API is supported on .NET 6.

EPiServer.Forms.ServiceApi 5.0.0;
Aug 04, 2022
AFORM-2814
  Update dependency for Forms Service API

Try to install following NuGet packages in a same project:

  • EPiServer.ContentDeliveryApi.Search
  • EPiServer.Forms.ServiceApi

The issue is that both has a dependency of another NuGet package (Microsoft.AspNet.OData) but to different versions. EPiServer.ContentDeliveryApi.Search needs Microsoft.AspNet.OData between 6.0.0 - 7.0.0, whereas EPiServer.Forms.ServiceApi needs Microsoft.AspNet.OData between 5.6.0 - 6.0.0, making it almost impossible to install both NuGet packages in same project.

EPiServer.Forms.ServiceApi 4.0.0;
Jun 29, 2021
AFORM-2406
  Performance improvements to Forms Service API

To improve performance, this version introduces a new endpoint for retrieving submission data.

/EPiServer.Forms.ServiceApi/FormSubmission/

{formId}

Supported query parameters:

  • language: Language of form (ISO 2 Letter Language Codes. For example: en, sv)
  • skip: Index of the first submission to return.
  • top: Maximum number of submissions to return.
  • sortColumnName: Sort results by column name. (e.g. __field_123).
  • sortDescending: Sort direction. Default value is true (sort desc by default if no param is passed).
  • beginDate: Show submission created after date.(format: 2014-04-25T16:15:47-04:00) (ISO 8601 format).
  • endDate: Show submission created before date.(format: 2014-04-25T16:15:47-04:00) (ISO 8601 format).
EPiServer.Forms.ServiceApi 3.5.0;
Feb 25, 2020
AFORM-2405
  Forms Service Api causes high CPU when getting submission
  • FormServiceApi retrieves all data submission from database before OData is applied.
  • We should introduce new endpoint for retrieving submission data and data should be filtered/paginated at database layer. That endpoint is described in AFORM-2406.
EPiServer.Forms.ServiceApi 3.5.0;
Feb 25, 2020
AFORM-1739
  Form.ServiceAPI not compatible with Episerver.serviceapi 5

Steps to reproduce

1. Install a site with Forms.
2. Install Episerver.serviceapi 5.0.
3. Install Episerver.forms.ServiceAPI .

--> Error: Episerver.ServiceAPI 5.0.0 not compatible with Episerver.Forms.ServiceApi 3.3.0

EPiServer.Forms.ServiceApi 3.4.0;
Jun 27, 2018
AFORM-983
  Forms.ServiceApi should depend on Forms.Core only

Forms.ServiceApi should depend on Forms.Core only. Before this change, it depended on the Forms package.

EPiServer.Forms.ServiceApi 3.2.0;
Apr 11, 2017
AFORM-888
  Improved Forms Service API for deleting submissions

This story introduces a new method for deleting form submissions: DeleteFormData.
The method requires formId (int) and recordIds (array of string) as its parameters.

Note: To perform the DeleteFormData method, the user must have WriteAccess permission to access the EPiServerServiceApi.

EPiServer.Forms.ServiceApi 3.1.0;
Feb 23, 2017
1 2 Next