v11.3.2 (rc0b6a0d)

Cloud Release: December 3, 2024

On Premise Release: N/A

v11.3.2 is a bug fix patch release. v11.3.2 is a Cloud-only release. Cloud customers are automatically upgraded. On Premise customers should subscribe to release announcements so you will receive an automatic email when the next On Premise version is available. 

Tickets Fixed

• TIP-32136 - Security: Client-Side HTTP Parameter Pollution (Reflected) (Low Risk)

• TIP-32895 - Inconsistent application details displayed on the browser tab.

• TIP-32897 - The custom logo on a portal displays as a broken image icon after logout.

• TIP-33020 - Security: nginx < 1.17.7 Information Disclosure (Medium Risk)

• TIP-33022 - Security: Server Leaks Version Information via “Server” HTTP Response Field Header (Low Risk)

• TIP-33023 - Security: SQL Injection (Low Risk)

• TIP-33141 - A default value in a date control produces the log error “An error occurred matching pattern…” and causes the control to not display in pdf mapping workflow outline.

• TIP-33165 - Performance: Many threads are blocked in production loading form/flow instances.

• TIP-33173 - Manage License & Usage page does not load submissions counts in some tenants with a long history.

• TIP-33197 - Doc Action: Send Email: Form/Workflow can be saved even Generated PDFs selection is invalid.

• TIP-33214 - Message Control RTE Link-Upload results in error when clicking link in test mode (Flows only).

• TIP-33390 - Oracle SQL Exception on Task Reject/Reassign after upgrade to v11.0.13 when submission xml is over 32kb.

• TIP-33408 - User upload can delete the tenant admin user, leaving no available built-in admin.

• TIP-33414 - The function frevvo.getGoogleSheetRows does not work if user is anonymous

• TIP-33424 - After making an edit to a form that changes the underlying shema (e.g. renaming a section), and when a number or money control is mapped to a PDF, users are unable to view PDFs in form viewer.

• TIP-33425 - PDF Mapper allows upload/mapping of a PDF with invalid xml, but then does not save the changes to the mapping or form.

• TIP-33456 - Security: CVE-2024-38286 Allocation of Resources Without Limits or Throttling

• FM-50 - Doc Action: Send Data: Manually Set Doc URIs: Form/Workflow can be saved even if the doc action is invalid (no doc URIs' set).

• FM-51 - After changing a project name, the Search feature still reflects the old project name.

• FM-64 - Signature images are incorrectly sent as attachments in workflow step Activity Doc Action: Send to External System.

v11.3.1 (r9fbb43c)

Cloud Release: September 10, 2024

On Premise Release: N/A

v11.3.1 is a bug fix patch release. v11.3.1 is a Cloud-only release. Cloud customers are automatically upgraded. On Premise customers should subscribe to release announcements so you will receive an automatic email when the next On Premise version is available. 

Tickets Fixed

• TIP-32120 - When there is an extraneous space character in Email Assignment field, the task is successfully assigned but it impacts email signature.

• TIP-33163 - Embedded form shows "The requested workflow was not found." error on mobile devices.

• TIP-33212 - Security: Unsanitized XSLT Parameters Allow Attacker Control Over Error PageContents and URLs.

• TIP-33232 - Schemas: Description is used as label instead of Name and uploading an empty schema file results in an application error.

• TIP-33294 - Save/Load | Anonymous User: The task notification email is not received when an anonymous user saves the form.

• TIP-33298 - Tenant Admin | Manage tab does not appear selected on Manage Users: Upload Signature page.

• TIP-33299 - My Projects | Link | Entering an existing project link causes poor page formatting.

• TIP-33304 - My Account icon does not work while in a form/flow.

• TIP-33309 - Forgot Password | Page mis-formatted and some links broken on Password Reset page.

• TIP-33316 - Document Action precondition does not save unless you have an action set first

• TIP-33333 - Viewing Mapped PDF (Form Viewer control) in multi-form flows where numeric controls are mapped causes application error.

• TIP-33338 - Send Data: Schema based Workflow does not retain Google (Legacy) OAuth.

• TIP-33339 - Deleting any escalation in the list results in the top escalation being incorrectly deleted.

• TIP-33350 - Google connector(Legacy) : Login button under 'Send to Google Drive' remains disabled while 'Post submissions to a Google Spreadsheet' is logged in.

v11.3.0 (rd444ece)

Cloud Release: July 23, 2024

On Premise Release: N/A

This is the initial GA release of DouPhase Forms v11.3.0. v11.3.0 is a Cloud-only release. Cloud customers are automatically upgraded. On Premise customers should subscribe to release announcements so you will receive an automatic email when the next On Premise version is available. 

New Features & Enhancements Introduced in v11.3.0

Designer Enhancements

• Designers may now configure up to 5 Activity Doc Actions per step and up to 5 Document Actions in Form/Workflow settings, all with optional preconditions. (TIP-32701)

• Money and Number controls can now be formatted to display locale-relevant currency symbols and decimal separators. (TIP-27325, TIP-32992)

• Designers now have the option to configure a read-only navigation toolbar (“Progress Bar”). (TIP-31499)

• Updated User Interface: Menu and Submenus displayed horizontally at top of page. (TIP-33043)

• Updated icons throughout application. (TIP-32693,TIP-32737)

• Updated DocuPhase logo in application. (TIP-32862)

• Designers and admins can now submit a support ticket from the top menu bar. (TIP-32360)

• Dashboards are automatically enabled for all tenants. (TIP-32597)

Integrations Enhancements

• A new, improved Google Connector is now built-in and can be configured under the Admin:Manage Connectors page. (TIP-33139)

• A new, improved SharePoint Connector is now built-in and can be configured under the Admin:Manage Connectors page. (TIP-28940)

Performance/Technical Improvements

• Upgrade framework to Spring Boot 3.2 and Java 21. (TIP-33056)

Tickets Fixed in v11.3.0

• TIP-29170 - Collapsed completed section label displays red even when there is no error.

• TIP-31165 - Searching for a Role that contains a space (non-default security managers only) clears search once the space is entered.

• TIP-32555 - After download/upload of the workflow.zip file, one mapped PDF is replaced by another.

• TIP-32590 - Roles (Groups) with Spaces/Ampersand don't work for task assignment. 

• TIP-32593 - After upgrade v10.1.x to v11.0.11, the error ‘liquibase.exception.DatabaseException: ORA-01452: cannot CREATE UNIQUE INDEX; duplicate keys found’ is encountered when there is missing data in the database.

• TIP-32653 - Valid/Invalid operators in Precondition Builder don't work (determined to be as-designed, they are no longer available options.)

• TIP-33080 - Optional section becomes required if one control in the section is set to required by a rule.

• TIP-33143 - Multilanguage Support: Reports page does not recognize Japanese font in form names and displays as '?'.

• TIP-33148 - View All Rules causes an Application Error on Flow with 2+ forms and the rules do not display.

• TIP-33150 - Dashboards: Setting both a date from table and state filter does not allow designer to complete chart configuration.

• TIP-33176 - Members of a role assigned 'Who can Administer the Workflow' access control do not receive invalid task assignment notifications.

• TIP-33188 - Default Assignment Message has a duplicate phrase ‘has been submitted’.

• TIP-33209 - TaskList | Modify task: Assignment/Step fields are incorrectly visible before a modify option is chosen.

Security

• TIP-33168 - Vulnerability - tomcat-coyote.jar (10.1.17) (CVE-2024-24549|CWE-20) resolved.

• TIP-33171 - Vulnerability - tomcat-websocket.jar (CVE-2024-23672|CWE-459) resolved.

• TIP-33103 - Vulnerability - spring-core-6.1.2.jar (CVE-2024-22233) resolved.

• TIP-33025 - Vulnerability - catalina.jar (CVE-2023-46589|CWE-444) resolved.

• TIP-33026 - Vulnerability - http2-common-11.0.16.jar (CVE-2023-44487|CWE-400) resolved.

• TIP-33028 - Vulnerability - spring-web-6.0.12.jar (CVE-2023-34053) resolved.

• TIP-33031 - Vulnerability - logback-core-1.4.11.jar & logback-classic-1.4.11.jar (CVE-2023-6378) resolved.

• TIP-32845 - Vulnerability - woodstox-core-6.2.6.jar (CVE-2022-40152|CWE-787) resolved.

• TIP-32846 - Vulnerability - tomcat-catalina-jmx-remote-9.0.14.jar (CVE-2019-12418) resolved.

• TIP-32847 - Vulnerability - jsoup-1.7.2.jar (CVE-2021-37714|CWE-248) resolved.

• TIP-32849 - Vulnerability - guava-26.0-jre.jar (CVE-2023-2976|CWE-552) resolved.

• TIP-32723 - Vulnerability - snappy-java-1.1.8.2.jar (CVE-2023-34455 | CWE-770) resolved.

• TIP-32725 - Vulnerability - tomcat-coyote.jar (CVE-2023-28709 | CWE-193) resolved.

• TIP-33019 - Strike Graph Pen Test (2023) - Session Fixation/Hijacking resolved.

Retired Features

• TIP-32783 - Form/Workflow Actions: Error action has been removed.

• TIP-32579 - Control Properties: "Sensitive" property has been removed.

End of Life Policy

DocuPhase supports major versions for two years after the first GA release date. Please see our complete list of End of Life dates on the Software Downloads Directory page. For some releases, the End of Life date may be extended. Documentation for versions that are no longer supported is available on our DocuPhase Forms Documentation Directory.