[IT-SecNots] CiviCRM Security Release (5.47.2, 5.46.3, 5.45.4 ESR)

["CiviCRM" <info AT civicrm.org>]

There has been a security release for CiviCRM. Upgrades are available for:

• CiviCRM v5.47.2 (download, release notes)
• CiviCRM v5.46.3 (download, release notes)
• CiviCRM v5.45.4 ESR (info, download, release notes)

NOTE: At time of writing, CiviEvent deployments should use v5.45 ESR or v5.46. Please wait before migrating to v5.47. (more info)

These upgrades address security issues:

• CIVI-SA-2022-01: CiviContribute, Access Bypass
• CIVI-SA-2022-02: CiviEvent Importer, SQL Injection
• CIVI-SA-2022-03: Permission Advice
• CIVI-SA-2022-04: jQuery UI v1.13
• CIVI-SA-2022-05: CKEditor v4.18

 

---

 

Click this link to unsubscribe from this mailing list.

Click this link to opt out of all mail from CiviCRM.org.

Our mailing address is:

1350 Ortega St
San Francisco, California 94122
United States