A new update is available for SAS Studio , version 3.71 :
Issues addressed in C2L005
| SAS Note 62907 | SAS® Studio file shortcuts are vulnerable to cross-site scripting |
| SAS Note 63452 | SAS® Studio might enable remote code execution via Java reflection |
| SAS Note 63460 | SAS® Studio contains a version of JQuery that has reached end-of-life status |
| SAS Note 63526 | SAS® Studio contains cross-site scripting and HTML-injection vulnerabilities |
| SAS Note 63530 | SAS® Studio 3.7 and later releases do not honor the \"Log user off on timeout\" middle-tier security policy setting |
| SAS Note 63558 | Inaccurate results are returned when the CONTAINS operator is used in the table viewer filter with a large database table in SAS® Studio |
| SAS Note 63662 | A misleading error message that says \"Unable to copy PDF stream\" is displayed in the SAS® Studio log file under certain conditions |
| SAS Note 63820 | Expanding Hadoop tables in SAS® Studio Enterprise 3.7 causes multiple DESCRIBE and SELECT queries on the database |
| This list of notes might be incomplete. For a complete list of issues addressed by this hot fix, visit the hot fix page for C2L005 |
Note: A comprehensive list of all SAS hot fixes is available from support.sas.com. You can use the SAS Hot Fix Analysis, Download, and Deployment (SASHFADD) tool to manage your SAS hot fixes.
