SilverStripe Payment Module: 0.3.1 and 0.4.1 security releases

[Ingo Schommer]

We've discovered a security issue which affects all versions of the payment module when used with the DPS payment provider (paymentexpress.com).

In short, attackers can gain access to DPS credentials by URL. Full description: https://github.com/silverstripe-labs/silverstripe-payment/blob/master/CHANGELOG.md#031

To fix the issue, either upgrade to 0.3.1 (download) and 0.4.1 (download), or apply the patch.

Thanks

Ingo