Release notes for HestiaCP v1.6.5

Release date: July 26 2022

Bugfixes

  • Add missing translation strings (#2778 @myrevery)
  • Add check if folder exists in v-change-web-domain-docroot (#2778)

Security

  • Improve random bytes generator (#2774)
  • Don't allow /inc/2fa/secret.php called from the web browser directly (#2784 @mayappear)
  • Improve CSRF Origin Check Bypass (#2785 @mayappear)
  • Fix vulnerability in Docuwiki Quick Install App @redstarp2 (CVE 2022-xxx-xxx)