Movable Type 6.8.7 Release Notes

This version of Movable Type was released August 24, 2022.

Movable Type 6.8.7 Releases Notes. This version includes a security fix.

Security issues

• [MTC-28496] Fixed an issue where an invalid request via the XMLRPC API could cause limited execution of perl or shell commands (CVE-2022-38078)

Resolved issues

• [MTC-28475] Fixed to show category UI correctly in smartphone view of mt.cgi

Acknowledgement

We would like to thank all those who have reported bugs and requested features for the release. In particular, we would like to thank the following people individually.

• [MTC-28496] Osaka University of Economics, SHIGA TAKUMA of BroadBand Security, Inc., IPA and JPCERT/CC for their cooperation in handling the vulnerability information