silverstripe-framework/docs/en/changelogs/2.4.12.md

# 2.4.12

## Overview

### Security: Privilege escalation through Group hierarchy setting (SS-2013-003)

See [announcement](https://www.silverstripe.org/download/security-releases/ss-2013-003-privilege-escalation-through-group-hierarchy-setting/)

### Security: Privilege escalation through Group and Member CSV upload (SS-2013-004)

See [announcement](https://www.silverstripe.org/download/security-releases/ss-2013-004-privilege-escalation-through-group-and-member-csv-upload/)

### Security: Privilege escalation through APPLY_ROLES assignment (SS-2013-005)

See [announcement](https://www.silverstripe.org/download/security-releases/ss-2013-005-privilege-escalation-through-apply-roles-assignment/)

## Changelog

### Bugfixes

 * 2013-08-30 [a914dee] Disallow permissions assign for APPLY_ROLES (SS-2013-005) (Ingo Schommer)
 * 2013-08-30 [6543b4e](https://github.com/silverstripe/silverstripe-cms/commit/6543b4e) Privilege escalation through Group and Member CSV upload (SS-2013-004) (Ingo Schommer)
 * 2013-08-30 [ec8e826] Privilege escalation through APPLY_ROLES assignment (SS-2013-005) (Ingo Schommer)
 * 2013-08-30 [7979515] Privilege escalation through Group hierarchy setting (SS-2013-003) (Ingo Schommer)
FIX Privilege escalation through Group hierarchy setting (SS-2013-003) See http://www.silverstripe.org/ss-2013-003-privilege-escalation-through-group-hierarchy-setting/ 2013-08-30 13:58:37 +02:00			`# 2.4.12`

			`## Overview`

			`### Security: Privilege escalation through Group hierarchy setting (SS-2013-003)`

DOCS 2.4 : Fixed all internally generated 404s DOCS 2.4 : Fixed some external links causing 404s DOCS 2.4 : adjusted link labels DOCS 2.4 : another link label fixed up DOCS 2.4 : fixed link 2015-12-01 18:58:31 +13:00			`See [announcement](https://www.silverstripe.org/download/security-releases/ss-2013-003-privilege-escalation-through-group-hierarchy-setting/)`
FIX Privilege escalation through Group hierarchy setting (SS-2013-003) See http://www.silverstripe.org/ss-2013-003-privilege-escalation-through-group-hierarchy-setting/ 2013-08-30 13:58:37 +02:00
			`### Security: Privilege escalation through Group and Member CSV upload (SS-2013-004)`

DOCS 2.4 : Fixed all internally generated 404s DOCS 2.4 : Fixed some external links causing 404s DOCS 2.4 : adjusted link labels DOCS 2.4 : another link label fixed up DOCS 2.4 : fixed link 2015-12-01 18:58:31 +13:00			`See [announcement](https://www.silverstripe.org/download/security-releases/ss-2013-004-privilege-escalation-through-group-and-member-csv-upload/)`
FIX Privilege escalation through Group hierarchy setting (SS-2013-003) See http://www.silverstripe.org/ss-2013-003-privilege-escalation-through-group-hierarchy-setting/ 2013-08-30 13:58:37 +02:00
			`### Security: Privilege escalation through APPLY_ROLES assignment (SS-2013-005)`

DOCS 2.4 : Fixed all internally generated 404s DOCS 2.4 : Fixed some external links causing 404s DOCS 2.4 : adjusted link labels DOCS 2.4 : another link label fixed up DOCS 2.4 : fixed link 2015-12-01 18:58:31 +13:00			`See [announcement](https://www.silverstripe.org/download/security-releases/ss-2013-005-privilege-escalation-through-apply-roles-assignment/)`
Added 2.4.12 changelog 2013-09-12 16:29:29 +02:00
			`## Changelog`

			`### Bugfixes`

			`* 2013-08-30 [a914dee] Disallow permissions assign for APPLY_ROLES (SS-2013-005) (Ingo Schommer)`
			`* 2013-08-30 [6543b4e](https://github.com/silverstripe/silverstripe-cms/commit/6543b4e) Privilege escalation through Group and Member CSV upload (SS-2013-004) (Ingo Schommer)`
			`* 2013-08-30 [ec8e826] Privilege escalation through APPLY_ROLES assignment (SS-2013-005) (Ingo Schommer)`
			`* 2013-08-30 [7979515] Privilege escalation through Group hierarchy setting (SS-2013-003) (Ingo Schommer)`