If you've downloaded IPB 2.1.7 since the time of this post, there is no need to update your installation as the main download has been updated.
It has come to our attention that Invision Power Board 2.1.x contains an issue in the threaded view mode allowing malicious users to access posts outside the topic.
This security update has a full version number of: 21013.60810.s.
Please read our KB article on how to locate your full version number.
Invision Power Board 2.1.7 Updated File
If you are currently version 2.1.7, please upload the attached file to sources/lib directory. This is the only updated file. If you are using a version prior to 2.1.7 it is suggested you upgrade to the latest version to ensure the proper function of your software.
func_topic_threaded.php 15.32K
13142 downloads
