\section{Carousel 7.2.3 Release Notes}
\begin{description}

\item[{\color{red}
\textbf{CSL-1957} \textbf{Change Default Password Hash Algorithm}
\textbf{Security enhancements.}
\item[{\color{red}
\textbf{CSL-2405} \textbf{Security: Change Admin PW on Install/Update}
\textbf{Implemented a workflow to force users to change the default password supplied during installation for security reasons.}
\item[{\color{red}
\textbf{CSL-2399} \textbf{Security: Malicious Files Can Be Uploaded to the Server}
\textbf{Fixed a security issue where executable scripts could be uploaded to the server.}
\item[{\color{red}
\textbf{CSL-1683} \textbf{Security: Carousel API RenderingFetch Method is Vulnerable to Local File Inclusion (LFI)}
\textbf{Fixed a security issue where the RenderingFetch endpoint could access local files.}
\end{description}

