topic Re: Security update for Alfresco share in Alfresco Forum

Security update for Alfresco share

Mitsu — Thu, 23 Sep 2021 04:27:42 GMT

Our pen testers indicated that the outdated version of jQuery and YUI is used which have several vulnerabilities and those libraries should be upgraded.
Are those libraries are patched by Alfresco? or Do you have any chance for security update for those libraries?
Cheers

Re: Security update for Alfresco share

cristinamr — Fri, 24 Sep 2021 10:08:09 GMT

Hi!

If we take a look into Release notes of 6.2 and 7.0 there's nothing related to YUI or JQuery but it's always recommended to be updated with Alfresco. There are numerous bugs solved between your version and latest 7.

In other hand, you can upgrade both libraries manually (this is always an option).

Cheers,

Cristina.