Movable Type 6.8.5 Release Notes
This version of Movable Type was released December 16, 2021.
This versions fixed a security issue.
Security issues
- Fixed additionally the OS command injection vulnerability via XMLRPC API (CVE-2021-20837, JVN#41119755)
Acknowledgment
This additional issue was reported by Chatwork Co., Ltd. This original issue was reported by Étienne Gervais and Charl-Alexandre Le Brun. We appreciate your cooperation!
