Funnelback patch 15.0.0.10

  • Released: 2018-12-19

  • Applies to: v15.0.0

  • Internal reference: SUPPORT-2838

Description

Prevents creation of objects within Freemarker template files to ensure that template editors can not cause external code to be executed.

Affected files

  • web/webapps/funnelback-publicui.war

Deployment

  • Deploy the provided files on top of an existing install (Note: A jetty restart is required for this change to take effect).

  • As patches are cumulative, apply deployment instructions from any previously unapplied patches.