Vulnerability in EPiServer.Forms
In /episerver /cms , EPiServer.CMS 12.24.0 (new and latest at time of writing) combined with EPiServer.Labs.GridView throws: MissingMethodException: Method not found: 'Void EPiServer.Cms.Shell.Internal.CmsModuleViewModel..ctor(EPiServer.Shell.Modules.ShellModule, EPiServer.Framework.Web.Resources.IClientResourceService, System.Collections.Generic.IEnumerable`1<EPiServer.Shell.IContentRepositoryDescriptor>, EPiServer.Core.IContentLanguageAccessor, EPiServer.Cms.Shell.UI.Configurations.HeadlessModeOptions)'.EPiServer.Labs.GridView.ContentChildrenModuleViewModel..ctor(ShellModule shellModule, IClientResourceService clientResourceService, IEnumerable<IContentRepositoryDescriptor> contentRepositoryDescriptors, IContentLanguageAccessor contentLanguageAccessor, GridViewOptions gridViewOptions, HeadlessModeOptions headlessModeOptions)EPiServer.Labs.GridView.GridViewModule.CreateViewModel(ModuleTable moduleTable, IClientResourceService clientResourceService)it can be reproduced with the simple standard setup:1) Create empty alloy project with "dotnet new epi-alloy-mvc --name AlloyTest" in cmd (The default version of CMS in template is 12.18.0 at the time of writing)2) Install EPiServer.Labs.GridView 1.1.0 3) Go into Startup.cs and add "using EPiServer.Labs.GridView; " in the top and "services.AddGridView();" after "services.AddDetection();" 4) Eventually run the solution and check localhost port 5000 /episerver /cms to see it is working.5) Upgrade EPiServer.CMS to 12.24.0 and see it is not working.6) Eventually downgrade EPiServer.CMS to 12.23.0 and see it is working again.So obviously someone at EPiServer Labs should be looking at this issue But can anyone think of any solution but removing EPiServer.Labs.GridView?I need EPiServer.CMS 12.24.0 as it includes a fix for another product bug fix I have been waiting for.
Thanks and best regards.
I will file a bug to the CMS UI team. Thanks for bringing this into our attention
Support team replies they are already on it. But putting it here too might make others not writing and asking the same thing.
We had a similar reported issue which has been solved, the fix will be included in the next release version: CMS UI 12.26.0.