20.10.13

20.10.13

Release date: November 15, 2021

Enhancements

• [CEIP] Product Adoption component integration
• [Core] Add Feature Flipping for Resources Status vs Legacy Pages
• [Core] Compatibility PHP 7.4

Bug fixes

• [Authentication] Fixed user information retrieval method for OpenId
• [CLAPI] Fixed recurrent downtimes exported with CLAPI that could not be imported with CLAPI
• [Configuration] Avoid blocking configuration generation when users don't have notifications enabled
• [Configuration] Fixed reset untouched values using massive changes on hosts
• [Configuration] Fixed empty string parameter for LUA output in Broker configuration
• [Custom Views] Fixed sharing of views with LDAP groups
• [Discovery] Fixed an issue causing error messages when filling credentials in a Host Discovery job
• [Downtime] Fixed display of planned downtimes when one downtime is started
• [Downtime] Fixed the adding of a downtime on a resource from the French GUI
• [Knowledge Base] Get correct link from template. Based on PR #10066
• [UX] Fixed menus by no longer displaying orphaned items

Security fixes

• CSRF - delete any command
• CSRF - delete any poller
• CSRF - delete any host
• CSRF - delete any SNMP trap
• CSRF - delete any service
• CSRF - delete any contactGroup
• CSRF vulnerability allowing to delete any user
• CSRF vulnerability allowing to delete many kinds of objects