New Release 19.4.8 and 20.0.4¶
CVE-2020-15244 3 is our second OpenMage CVE and our first CVE that is wholly independent of Adobe! 1 2
This vulnerability was disclosed to us privately from a community member via our HackerOne program and patched in versions 19.4.8 and 20.0.4. Please update to one of these version to receive the patch.
A big thanks to Luke Rogers for submitting the report!