Movable Type 6.8.7 Release Notes
This version of Movable Type was released August 24, 2022.
Movable Type 6.8.7 Releases Notes. This version includes a security fix.
- [MTC-28496] Fixed an issue where an invalid request via the XMLRPC API could cause limited execution of perl or shell commands (CVE-2022-38078)
- [MTC-28475] Fixed to show category UI correctly in smartphone view of mt.cgi
We would like to thank all those who have reported bugs and requested features for the release. In particular, we would like to thank the following people individually.
- [MTC-28496] Osaka University of Economics, SHIGA TAKUMA of BroadBand Security, Inc., IPA and JPCERT/CC for their cooperation in handling the vulnerability information