- General
-
Questions
0
Under review
October Code Exploits
With all the vulnerabilities uncovered in the past week across everything from Python to PHP, Node.JS and Java to name a few do we need to get a patch for Ubooquity. Should we block all external access for the time being while you work on a patch if it is needed. Thanks
Customer support service by UserEcho
Hello Matthew,
Ubooquity runs on Java and uses some very simple browser side Javascript (so no Node.js).
I am not aware of any vulnerability that woul impact Ubooquity, if you have something specific in mind, let me know and I'll check.
If you expose your instance on the Internet, a good security practice is to not allow remote access for the administration part of Ubooquity.
Thank you for the prompt response, I'm not aware of any specific issues that might affect this code. I also run other self hosted servers and some of those have had hot fixes, so was just checking. I keep the admin part local only already, nothing there so important that it can't wait until I get home.