would like to give credit to Richard Turnbull at NCC Group for the discovery of the following vulnerability and for his cooperation:Īuthenticated users could potentially misuse the Package Upload wizard to upload zip files to the system, even if they did not have access to the Installation Wizard.
To learn more about Sitecore’s versioning system, see the Sitecore Versioning Policy page.įor instructions on how to download and install this release, please visit the appropriate Sitecore CMS 6 downloads page. This is especially true in production environments. Sitecore recommends customers to install service packs for any feature release that the customer has installed. Each release undergoes careful quality assurance procedures to minimize the number of issues. You can use these reference numbers when communicating with Sitecore about a particular issue or feature.Īs part of our commitment to continually improving our software and listening to our customer’s feedback, Sitecore regularly releases new versions of our CMS product.
Some of the issues described on this page contain internal reference numbers. Release History for Sitecore CMS 6.6 and DMS