VaultWiki Security Update: July 2022

As of July 7, security patches for July 2022 are now available.

Issue List

VWE-2022-6453 is a Permissions Escalation issue, where a user is able to manage the wiki integrations on another user's profile. The issue affects VaultWiki 4.0.0 Beta 7 and higher, on XenForo 1.x platforms only.

Patches

The following patches address the aforementioned issue:

• 4.1.5 Patch Level 1
• 4.1.4 Patch Level 2
• 4.1.3 Patch Level 5

Notes

We highly recommend that all users running VaultWiki on XenForo 1.x in a production environment update to a patched release as soon as they are able.