Yetiforcecrm: Vulnerabilities in libraries

[manwenick]

Vulnerabilities in libraries
Vulnerabilities in libraries were detected, it is recommended to update them quickly.
Vulnerabilities:
phpmailer/phpmailer(v6.0.5):
Object injection CVE-2018-19296
phpoffice/phpspreadsheet(1.3.1):
XXE Vulnerability CVE-2018-19277

Is any update available?

Your Environment

• YetiForce Version used: 4.4.0
• Browser name and version:
• Environment name and version:
• Operating System and version:

[bpabiszczak]

It will be ready for tomorrow morning.

[mariuszkrzaczkowski]

Fixed
https://github.com/YetiForceCompany/YetiForceCRM/releases/tag/4.4.0
https://github.com/YetiForceCompany/YetiForceCRM/releases/download/4.4.0/4.4.0_SecurityPHPMailerAndPhpSpreadsheetFix.zip

[manwenick]

Hello @mariuszkrzaczkowski,
I tried to install the fix, but it doesn't work.
I get a notification: Module does not contain default language (en_us).
What does it mean and how can I solve this?

Thank you!

[manwenick]

@mariuszkrzaczkowski I downloaded a false file, it was not complete. Sorry.
The issue is solved!
Thank you!

[rohanjhanepal]

Does it work for yetiforce v5.3.0 too ??
I am having same issue