
SD-107115 : Unable to preview attachments in requests created via email if file name contains period (.) or ellipsis (.) before the file extension. SD-107031 : An error is thrown when accessing the request list view if a requester cancels a request which is created based on a template in which the Status field is not shown to requesters. SD-107504 : Incoming emails are not processed as notifications in requests if the email address contains special characters. SD-107411 : Unable to add a new email address in To, CC or Bcc fields if it is a substring of any existing email address. SD-107908 : Inline images are broken in the outgoing email notifications if the configured attachment path is not the default one and EWS is configured in Outgoing Mail Server settings. SD-107910 : Request system notifications (SMS) get encoded in non-English setups. SD-107911 : $ConversationDetails variable does not replace the content when reply/forward is performed from the request description.
The format of content in the Resend window is changed under request conversation/description.
SD-107565: $LastConversationDetails variable used in the notification rules template is now renamed as $ConversationDetails.
SD-106853 : Users can now right-click on the built-in widgets in Helpdesk dashboard to access the request list view in a new tab. SD-106790 : Denial of Service (DoS) vulnerability detected when uploading images continually in the application. SD-107690 : Privilege escalation vulnerability while associating projects from requests. SD-107727 : Privilege escalation vulnerability while disassociating requests from projects. SD-107728 : Privilege escalation vulnerability while associating requests from projects. SD-106855 : Authentication bypass vulnerability in Two-Factor Authentication login page. SD-106993 : Sensitive data printed in logs.
SD-106815 : Sensitive data exposure vulnerability in reports. SD-106832 : CVE-2023-23074 : Stored XSS vulnerability in the Advanced Portal product tour reported by Hiểu Minh. SD-106897 : Stored XSS vulnerability in request life cycle reported by r0ck3t.
SD-106331 : Cleartext passwords transmission vulnerability in backup scheduling.