Release Date: August 18, 2025
Build Number: 12.0.4.1106
This release addresses the following security vulnerabilities:
Desktop Application
- 🛠️The error message to an error condition only displays a generic error message that does not include any sensitive information.
- 🛠️Dumping process memory also ensures passwords are removed from memory.
Web Application
- 🛠️JavaScript source map files are not retrievable in production environments.
Web Services Application
- 🛠️The error message displayed to an error condition in the SOAP API does not display any sensitive information.
- 🛠️Broken access control flaws in the FlexiCapture API have been resolved.
- 🛠️Content Security Policy (CSP) only allows trusted sources of JavaScript and disables inline JavaScript
The following issues have been fixed:
- 🪲623180: When you open your project locally from the server, the extracted results are the same
- 🪲628594: Order number is detected correctly in FlexiCapture cloud
- 🪲621109: OAuth refresh token for Microsoft IMAP import profiles is working correctly
- 🪲637155, 🪲636904, 🪲636895, 🪲637297 - Logging in to the Project Setup Station and the Verification Station works as expected.
- 🪲637263 - Verification operators are able to postpone tasks in the Verification Station, as expected.
This update of FlexiCapture has resolved security vulnerabilities and functional issues. For these fixes to work as expected, ensure the following:
- ✅Users must be assigned an appropriate role and have project access to log in to either the verification Station or the Project Setup Station.
- ✅If users encounter access issues with these stations, confirm their role assignment and project access permissions via the FlexiCapture Admin Console. This step typically resolves most access related concerns.
- ✅You must sign in to the import profile again to ensure seamless token refresh, and the fix works as expected.