You are here: Foswiki>Support Web>KnownIssuesOfFoswiki02x01 (06 May 2017, GeorgeClark)Edit Attach

Known Issues of Foswiki 2.1 Production Releases

These are known issues of Foswiki 2.1.X If you are using an older version of Foswiki see KnownIssuesOfFoswiki01x00, KnownIssuesOfFoswiki01x01 and KnownIssuesOfFoswiki02x00

The latest Foswiki release is available at Download

Security Alerts

Get Alerted:	To get immediate alerts of high priority security issues, please join the low-volume `foswiki-announce` list - details at MailingLists

Security alerts or advisories apply to Release02x01 releases:

CVE-2018-7446: User Registration process can be compromised through user registration. Fixed in: FoswikiRelease02x01x06 FoswikiRelease02x01x06
CVE-2023-24698: Local file inclusion vulnerability in viewfile Fixed in: 2.1.8 FoswikiRelease02x01x08
CVE-2023-33756: SpreadSheetPlugin's EVAL feature exposes infromation about paths and files on the server Fixed in: 2.1.8 FoswikiRelease02x01x08
Multiple vulnerabilities addressed in Foswiki-2.1.3. Fixed in: 2.1.3 FoswikiRelease02x01x03
Multiple vulnerabilities addressed in Foswiki-2.1.4. Fixed in: 2.1.4 FoswikiRelease02x01x04

See SecurityAlerts for full list of all alerts.

Release Foswiki-2.1.3

Major issues of Foswiki, to be fixed in: 2.1.4

The following "urgent" issues have been marked for resolution in Foswiki 2.1.4

Id	Summary	Component	Current State
Item14324 7 years	Perl 5.25.10 reports unescaped left brace in regular expression errors. distro:61ca6a57acdd distro:32cfdf2b88ee distro:26d38fc13e35 distro:a615f9743e2a distro:919ca8d4bf17	PlatformPerl	Closed
Item14346 7 years	Systemd service file has issues, needs better documentation. distro:e002399716fb distro:b58575cac375 distro:5649b0a2fc4b distro:5bc31fdda515 distro:bbdbd84edc6b distro:80eefdfe0908 distro:7dc472f5fc01	FastCGIEngineContrib	Closed
Item14349 7 years	EditRowPlugin Edit Table button not functional on IE 11. distro:3f7c5f26e918 distro:d050b7cbd578 distro:0db156e0cfb1	EditRowPlugin	Closed
Item14366 7 years	=use CGI::Carp= in bin scripts BEGIN block cannot be found via LocalLib.cfg override. distro:e7c23479e22c distro:8a9c3c4c43c8	PlatformPerl	Closed
Item14368 7 years	Failure to handle edge cases leads to obscure bug in RCS. distro:edfcc28e0a48 distro:a542eeaa7bd7 distro:8b85ec33b959 distro:999b73a21d9c distro:ee3a5bd1da3f distro:2b757626810b distro:f920be007364 distro:27d92f89efc1 distro:c4550f5dcb69 distro:78f56bd2b698	RCSStoreContrib	Closed
Item14372 7 years	JQueryPlugin ui-draggable got dropped from Config.spec. distro:9f183649bef6	JQueryPlugin	Closed
Item14388 6 years	NatEditPlugin does not honor the ScriptSuffix setting, and doesn't accommodate short URLs. distro:17f1ed4da420	NatEditPlugin	Closed
Item14400 6 years	Configure settings leak into the global $Foswiki::cfg hash in fcgi environment distro:0324256d171b	Configure	Closed
Item14401 6 years	Foswiki crashes if PageCache is enabled with missing dependencies distro:36956afc18f1 distro:01fd5e81b530	PageCache	Closed
Item14404 6 years	NatEdit Save and Continue action fails on mod_perl systems. distro:a3fb8a4664e0	NatEditPlugin	Closed
Item14405 6 years	Redirect after validation with HTTPS proxy for HTTP site results in unsafe redirect. distro:de3aafcb8c2c	FoswikiRequest	Closed

%STARTSECTION{"urgents"}%
---+++ Major issues of Foswiki, to be fixed in: %RELEASEDIN%
The following "urgent" issues have been marked for resolution in Foswiki %RELEASEDIN%

%TABLE{columnwidths="10%,80%,10%,10%" sort="off"}%
%SEARCH{"(
     (Priority = 'Urgent')
     AND (ReleasedIn = '%RELEASEDIN%'
     AND CurrentState NOT = 'No Action Required')
    )"
    web="Tasks"
    excludetopic="ItemTemplate"
    topic="Item*"
    type="query"
    nonoise="on"
    order="formfield(CurrentState)"
    reverse="on"
    limit="%URLPARAM{"limit" default="%LIMIT%"}%"
    header="| *Id* | *Summary* | *Component* | *Current State* |"
    format="| [[$web.$topic][$topic]]%BR%<span class='foswikiGrayText foswikiSmall '>$percntCALC{$FORMATTIMEDIFF(min, 1, $ROUND($TIMEDIFF($TIME($createdate GMT), $TIME(), min)))}$percnt</span> | <noautolink>$formfield(Summary)</noautolink> <br/> $formfield(Checkins) | $formfield(Component) | $formfield(CurrentState) |"
}%
%ENDSECTION{"urgents"}%