Security Fix for ColdFusion on Wheels 1.1.x and 1.0.x Released
A security vulnerability has been identified in both the 1.1.x and 1.0.x versions of Wheels. In response, the Wheels team is releasing patches for both the current and legacy versions. Version 1.1.7 is to address current version and version 1.0.6 is to address legacy versions.
At this time, we encourage all users of the framework to upgrade as soon as possible. These new versions contain only the patches necessary to close the security vulnerability. No new bug fixes or enhancement features are contained.
The Wheels team would like to thank Pete Freitag of foundeo.com for reporting and helping to patch the security vulnerability.
Is it enough to overwrite the wheels folder when you’re upgrading from 1.16? Or do other files need to be updated as well?
yes. you can just overwrite the wheels folder.