Modernize or Die® - CFML News Podcast for March 7th, 2023 - Episode 187

2023-03-07 Weekly News - Episode 187

Watch the video version on YouTube at https://youtube.com/live/6BZn9dCSHEs?feature=share

Hosts: 

• Gavin Pickin - Senior Developer at Ortus Solutions
• Grant Copley - Senior Developer at Ortus Solutions

Thanks to our Sponsor - Ortus Solutions

The makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there. 

A few ways  to say thanks back to Ortus Solutions:

• Like and subscribe to our videos on YouTube. 
• Help ORTUS reach for the Stars - Star and Fork our Repos
  • Star all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github 
• Subscribe to our Podcast on your Podcast Apps and leave us a review
• Sign up for a free or paid account on CFCasts, which is releasing new content every week
• BOXLife store: https://www.ortussolutions.com/about-us/shop
• Buy Ortus’s Books
  • 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips)
  • Learn Modern ColdFusion (CFML) in 100+ Minutes - Free online https://modern-cfml.ortusbooks.com/ or buy an EBook or Paper copy https://www.ortussolutions.com/learn/books/coldfusion-in-100-minutes 

 
Patreon Support ( BOXTACTULAR ) - UPDATED GOALS

We have 40 patreons:

Goal 1 - 25% -  This goal would help us to fully fund the hosting of ForgeBox.io (www.forgebox.io), the ColdFusion software directory.
Goal 2 - 12% - This goal would fund the development of CommandBox CLI, so it can remain FREE and Open Source forever.
Goal 3 - 6% - This goal would help us to fully fund the Modernize or Die podcasts.

https://www.patreon.com/ortussolutions.

News and Announcements

Authentication Bypass Vulnerability in Mura CMS and Masa CMS (CVE-2022-47003 and CVE-2022-47002)

Mura CMS is a popular content management system written in ColdFusion/CFML. While it was originally a commercial open source product, it was re-licensed as a closed source application with the release of Mura CMS v10 in 2020.  There are forked open source projects based on the last open source release of Mura CMS, including Masa CMS - which is actively maintained.

Multiple versions of Mura CMS and Masa CMS contain an authentication bypass vulnerability that can allow an unauthenticated attacker to login as any Site Member or System User.
https://hoyahaxa.blogspot.com/2023/03/authentication-bypass-mura-masa.html

ICYMI - State of the CF Union 2023 Released

Help us find out the state of the CF Union – what versions of CFML Engine do people use, what frameworks, tools etc.
https://teratech.com/state-of-the-cf-union-2023-survey

New Releases and Updates

CommandBox 5.8.0 Released!

We are pleased to announce the release of CommandBox 5.8.0, which comes with a handful of new features and some important library updates.

Now bundles commandbox-cfconfig, commandbox-dotenv, commandbox-update-check. Automatically installed or updated when you start CLI

Automcally sets the content type in the HTTP response for static file typesl. You can customize in server.json

Config and Module Sync - if you are authent