Security Fixes

• The configurable Mail SMTP ports have been limited to the common ports 25, 465, 587 and 2525, so that Mail Page cannot be abused for arbitrary port scans.

• The mail server host must not be a local or private address to avoid access to internal infrastructure.

Bug Fixes

• If the Mail Page Cloud license is missing, a corresponding message is now displayed in the admin area and in the mail send form. In addition, sending is no longer possible.

Known issues

If you can’t find other Confluence users in the recipient field, please check out our https://kencha-software.atlassian.net/wiki/spaces/MPD/pages/297697305 for more information.