http://coldfusion.com logo
Join Slack
Powered by
# mura
  • g

    guustnieuwenhuis

    05/19/2022, 8:27 AM
    Last night (eu time) we’ve release a security fix for #masacms, the vulnerability also exists in Mura 6.1, 7.0 and 7.1. We don’t know what the status is for Mura X. If you are running Mura 6.1 or later, please have a look at the the changes in Masa CMS 7.3.4 and apply these manually on your Mura instance. Or migrate to Masa CMS, let me know if you’ll need help with that.
  • s

    sknowlton

    05/27/2022, 4:27 PM
    (apologies for the crosspost but probably should've put this here) We have an install of Mura that is about 3 years old and which as been running in Docker that whole time. It was on Mura 7.3.1 and Lucee 5.3.6. I'd been putting off and putting off doing anything with it because it 'just worked' but it really needed to be running current versions both of Lucee and Mura or Masa. We rebuilt the docker images with our updated Lucee base images and then by cloning the Masa repo instead of the Mura repo and dropped it in our Docker swarm. It 'just worked' - all sites running, admin logins, everything. Smoothest update we've had for anything in a while! Thanks guys!
    👍 2
  • j

    jamiejackson

    09/09/2022, 4:51 PM
    has anybody integrated gatsby with mura to generate static pages from mura? i did find this by @ronnieduke, so i'm guessing they have made it happen.
    e
    • 2
    • 1
  • s

    satauros

    10/10/2022, 9:50 AM
    Is there anybody available here to answer a question regarding an older version of Mura?
    e
    • 2
    • 4
  • b

    Brian Reilly

    12/08/2022, 2:53 PM
    Mura CMS < 10.0.580 is vulnerable to a recently-discovered authentication bypass vulnerability (cf. a similar issue in Masa CMS -- https://cfml.slack.com/archives/C02EB3Y57SR/p1670358749665149) Posting this here for general awareness. Organizations running older Mura CMS versions will want to determine their best upgrade/patch strategies for this one.
    👍 1
  • j

    Jason Wilson

    02/02/2023, 4:14 PM
    Can I access Mura cfc handlers via ajax url? If so, what would that url be?
  • s

    satauros

    02/05/2023, 1:21 PM
    Can I leverage the JavaLoader present in Mura (6) for loading additional jars without restarting the server / application?
    e
    • 2
    • 1
  • b

    Brian Reilly

    03/06/2023, 1:35 PM
    I released the full advisory on the Mura CMS / Masa CMS authentication bypass vulnerability (CVE-2022-47003 / CVE-2022-47002) today - https://hoyahaxa.blogspot.com/2023/03/authentication-bypass-mura-masa.html. In addition to technical details about the vulnerability, I also share some thoughts on quick fixes for sites running older, unsupported open source Mura CMS that can't immediately migrate to Masa CMS.
    👍🏻 1
    👍 4
    j
    • 2
    • 3
  • j

    jsteenbergen

    07/17/2023, 8:53 PM
    @jsteenbergen has left the channel
  • n

    nick

    07/31/2023, 4:49 PM
    @nick has left the channel
  • j

    Jason Wilson

    09/19/2023, 12:08 AM
    All of the sudden, we cannot login to MURA CMS Admin with any user (we have several setup as admins) including the admin user. If I punch in a username/password that is WRONG, I get the login failed message "No account was found with that Username and Password." If I punch in a username/password that is RIGHT, it just takes me back to the same login page, no re-direct, with no message at all. I know the passwords are 100% correct. Any suggestions?
  • j

    Jason Wilson

    09/19/2023, 12:16 AM
    We're running Coldfusion 10 on the server.
    e
    m
    • 3
    • 6
  • c

    chippinkston

    01/25/2024, 4:54 PM
    Has anyone else seen issues with the CKEditor in Mura? Yesterday ours stopped working, and we're seeing the following message in consoles:
    Copy code
    Access to XMLHttpRequest at '<https://cke4.ckeditor.com/ckeditor4-secure-version/versions.json?v=4.22.1>' from origin 'https://{{domain}}' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.
  • m

    miguel-f

    02/06/2024, 1:37 PM
    FYI - received the following from Mura Support: Dear Mura CMS Customer, During testing, an RCE (Remote Code Execution) security vulnerability was found in all versions of Mura CMS. To date, there have been no known exploitation incidents other than the research that led to the discovery of this vulnerability. There are two ways to deploy the fix, either to upgrade Mura to 10.0.687 (recommended) for immediate remediation, or, to manually patch the exploit.
    j
    g
    • 3
    • 7
  • g

    guustnieuwenhuis

    02/08/2024, 1:50 PM
    @miguel-f or consider upgrading to Masa CMS: https://www.wearenorth.eu/updates/unlocking-new-possibilities-5-compelling-reasons-to-embrace-masa-cms-over-mura-cms/
    👍🏼 1
    👍 3
  • e

    ehoffman

    02/20/2024, 9:08 PM
    @ehoffman has left the channel
  • m

    mauzer

    06/04/2024, 9:32 AM
    How on earth do you add a plugin in MURA / MASA? I have tried some many different resources all with entirely different interpretation of how to do it . Badly need some assistance if anyone can spare a mo be much appreciated🙏 I have got as far as Uploading the Plugin and is recognized by MASA as I can see it in the plugins list but I get the following error : "ERROR": "key [SERVICEFACTORY] doesn't exist", I can't seem to access any Beans
    m
    • 2
    • 2
  • m

    mauzer

    06/04/2024, 12:57 PM
    Copy code
    {
      "ERROR": "key [SERVICEFACTORY] doesn't exist",
      "DETAIL": "",
      "TAGCONTEXT": "C:\\ComplyINSHub\\demo\\www\\plugins\\MuraTaffy\\taffy\\dashboard\\dashboard.cfm [Line 8]",
      "STACKTRACE": [
        {
          "Raw_Trace": "plugins.murataffy.taffy.dashboard.dashboard_cfm$cf$41.call(/plugins/MuraTaffy/taffy/dashboard/dashboard.cfm:8)",
          "codePrintPlain": "6: \t\tsiteid = StructKeyExists(session, 'siteid') ? session.siteid : 'default';\n7: \n8: \t\tm = application.serviceFactory.getBean('m').init(siteid);\n9: \n10: \t}\n",
          "column": 0,
          "line": 8,
          "template": "C:\\ComplyINSHub\\demo\\www\\plugins\\MuraTaffy\\taffy\\dashboard\\dashboard.cfm",
          "id": "??",
          "type": "cfml",
          "codePrintHTML": "6: \t\tsiteid = StructKeyExists(session, 'siteid') ? session.siteid : 'default';<br>\n7: <br>\n<b>8: \t\tm = application.serviceFactory.getBean('m').init(siteid);</b><br>\n9: <br>\n10: \t}<br>\n"
        },
        {
          "Raw_Trace": "plugins.murataffy.taffy.core.api_cfc$cf$40.udfCall1(/plugins/MuraTaffy/taffy/core/api.cfc:110)",
          "codePrintPlain": "108: \t\t\t\t\t\t<cfinclude template=\"#application._taffy.settings.docsPath#\" />\n109: \t\t\t\t\t<cfelse>\n110: \t\t\t\t\t\t<cfinclude template=\"../dashboard/dashboard.cfm\" />\n111: \t\t\t\t\t</cfif>\n112: \t\t\t\t\t<cfabort />\n",
          "column": 0,
          "line": 110,
          "template": "C:\\ComplyINSHub\\demo\\www\\plugins\\MuraTaffy\\taffy\\core\\api.cfc",
          "id": "??",
          "type": "cfml",
          "codePrintHTML": "108: \t\t\t\t\t\t<cfinclude template=&quot;#application._taffy.settings.docsPath#&quot; /><br>\n109: \t\t\t\t\t<cfelse><br>\n<b>110: \t\t\t\t\t\t<cfinclude template=&quot;../dashboard/dashboard.cfm&quot; /></b><br>\n111: \t\t\t\t\t</cfif><br>\n112: \t\t\t\t\t<cfabort /><br>\n"
        },
        {
          "Raw_Trace": "plugins.murataffy.application_cfc$cf$38.udfCall(/plugins/MuraTaffy/Application.cfc:23)",
          "codePrintPlain": "21: \n22: \t\tfunction onRequestStart(TARGETPATH){\n23: \t\t\treturn super.onRequestStart(TARGETPATH);\n24: \t\t}\n25: \n",
          "column": 0,
          "line": 23,
          "template": "C:\\ComplyINSHub\\demo\\www\\plugins\\MuraTaffy\\Application.cfc",
          "id": "??",
          "type": "cfml",
          "codePrintHTML": "21: <br>\n22: \t\tfunction onRequestStart(TARGETPATH){<br>\n<b>23: \t\t\treturn super.onRequestStart(TARGETPATH);</b><br>\n24: \t\t}<br>\n25: <br>\n"
        }
      ]
    }
  • m

    mauzer

    06/17/2024, 9:20 AM
    Can anyone help? I have built an API as a plugin within Mura but I need to make the plugin publicly accessible - i.e not have to go through the webform login process. Is there a way of doing this ?
  • e

    Evil Ware

    06/17/2024, 1:56 PM
    Mura has become commercial so you need to go ask that company why their latest builds break your json call,
    🙏 1
  • s

    satauros

    06/17/2024, 2:02 PM
    @satauros has left the channel
  • m

    mauzer

    06/28/2024, 1:04 PM
    I am looking to how to register a custom JSON API and have looked at this documentation but it doesn't actually specify where you need to place this code in the application. It provides you with the script to do it but not the location where this file should be placed https://docs.murasoftware.com/v7/mura-developers/mura-rendering/json-api/register-custom-api-method/
    j
    • 2
    • 1
  • c

    chris-schmitz

    06/28/2024, 2:16 PM
    @chris-schmitz has left the channel
  • m

    mikechy

    07/29/2024, 4:54 PM
    Good afternoon. Encountering something that I thought worked differently in the past. in the /cache/file folder where all of the thumbnails are, I thought in the past when we killed the custom sizes (small, medium, large, custom names, etc) and tried to call it again, Mura/Masa would generate a new thumbnail if there wasn't one there. That doesn't seem to be happening anymore. It just says the file it not there even though the path is correct. We've reloaded the app and even reloaded the web server. Is this a recent bug or change in functiona;lity? There is a method that will literally rebuild every single file but on a site with 10,000 images, that's a little too brute force..
    m
    • 2
    • 1
  • j

    Jason Dean

    12/20/2024, 8:30 PM
    Anyone using Azure Blob Storage for Mura X asset file storage? I've seen examples/instructions for using AWS S3, but I am not finding anything on Azure Blob Storage.
  • g

    guustnieuwenhuis

    01/03/2025, 9:21 AM
    Hi Jason, I'm not aware of anyone using Azure Blob Storage.
  • s

    salted

    01/13/2025, 6:31 PM
    Hi folks I have a mura site running with a root domain (i.e. https://[domain].co.uk) (edited) It’s running with IIS I’ve added a binding of https://www.[domain].co.uk and I get a 403 is that something at my IIS/server end or something in Mura I need to change?
    e
    • 2
    • 2
  • a

    alholden

    04/01/2025, 4:59 PM
    If all of our Mura sites are under the same aws s3 bucket, then why would the [Browse Server] button under the image dialog of the ckeditor produce a list of images from all the sites - except one? The s3 paths are identical below each parent siteID in the bucket. I can see the images in the AWS console, the front-end Mura site provides the correct URLs and images all display fine for the browser. But when you try to edit one article and want to select an s3 image to place, [Browse Server] says there are no images there. If this happened for all of the sites I think it would be much easier to debug 🤔
    g
    • 2
    • 21
  • a

    alholden

    04/02/2025, 3:21 PM
    Also posted here.
  • a

    alholden

    04/08/2025, 4:00 PM
    What setting might be causing MASA to serve up core content (cfm) just fine, but throw 403 FORBIDDEN on all of the asset files like js, css, etc. ?? This seems limited to MASA sites only - our other Lucee apps are just fine. Something in a recent Lucee update? Cloudflare?
    q
    • 2
    • 5