Update Feed

osTicket 1.10.4

21 July 2018

osTicket version 1.10.4 is now available (security release).

Upgrading to osTicket 1.10.4

osTicket 1.10.4 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply osTicket updates as new versions are released, or use Installatron's Clone feature to duplicate an existing osTicket install to test the 1.10.4 upgrade prior to applying it live. Get started managing your osTicket installations with Installatron

What's New in osTicket 1.10.4

1.10.4

Security

Fix Multiple XSS Vulnerabilities

Highlights

Auto-Assignment Log
Language Pack Locale Mismatch
CLI Deploy Missing Bootstrap
User Import No Email
Ticket Lock On Disable

1.10.3

Security

Prevent Click Jacking

Highlights

Org. User Account Status
Flush Cache On Upgrade
Outlook _MailEndCompose
Files - deleteOrphans()
Fix imap_open Disable Authenticator
Check permissions before displaying Close Task
Information Page Performance
queryset: Fix circular reference error

1.10.2

Security

Prevent Account Takeover
Prevent Agent Directory XSS
Httponly Cookies
Only allow image attachments to be opened in the browser window
CSRF in users.inc.php URL
AJAX Reflected XSS
File Upload Bypass