Version 2.3.4
Enhancements:
- #5586 Migrate CI pipelines to GitHub Actions
- #5139 Simulations with a large number of simultaneously executed injects may cause a database lockup
Bug Fixes:
- #5609 [Wis] Inject fails when targeting individual player instead of team
- #5608 [Wis] Simulation reset does not update inject state (reset ineffective)
- #5573 Agent, implant binaries requests don't validate user input
- #5540 Basic Dockerfile not building anymore
- #5537 Unable to Create Lessons Learned
- #5512 [frontend] Japanese locale (ja.json) contains critical mistranslations and inconsistencies
- #5106 Read only permissions will lead to error in home dashboard
- #1785 [security] Cross-Site Request Forgery (CSRF)
Pull Requests:
- [backend] fix(connectors): improving connector instance query (#5139) by @savacano28 in #5406
- [frontend] chore(deps): update dependency dompurify to v3.4.0 [SECURITY] by @renovate[bot] in #5478
- [backend] chore(deps): update aws-java-sdk-v2 monorepo to v2.42.35 by @renovate[bot] in #5530
- [frontend] chore(deps): update dependency html-react-parser to v6 by @renovate[bot] in #5429
- [backend] chore(deps): update aws-java-sdk-v2 monorepo to v2.42.36 by @renovate[bot] in #5546
- [frontend] chore(deps): update dependency @ckeditor/ckeditor5-react to v11.1.2 by @renovate[bot] in #5547
- [frontend] fix: fix 267 Japanese translation errors and unify terminology (#5512) by @Yohei-Yamamoto8182 in #5513
- [backend] fix(api): prevent IDOR on inject endpoints by validating parent ownership by @RomuDeuxfois in #5527
- [tool] fix(dockerfile): missing corepack and patches (#5540) by @guzmud in #5541
- [frontend] chore(deps): update dependency qs to v6.15.1 by @renovate[bot] in #5563
- [frontend] chore(deps): update dependency uuid to v14 [SECURITY] by @renovate[bot] in #5564
- [frontend] chore(deps): upgrade monocart-reporter, dompurify by @antoinemzs in #5568
- [tool] chore: add ci for testing-xtm-one (#1) by @raugier in #5516
- [frontend] fix(lessons): fix the lessons learned creation (#5537) by @camrrx in #5558
- [backend] fix(tests): fix integration tests by @RomuDeuxfois in #5577
- [backend] fix(security): add csrf token management (#1785) by @gabriel-peze in #4956
- [backend] chore(deps): update aws-java-sdk-v2 monorepo to v2.42.37 by @renovate[bot] in #5585
- [backend] chore: add execution time logging to job execution methods by @guillaumejparis in #5466
- [backend] fix(account): make password reset asynchronous (#0000) by @antoinemzs in #5528
- [frontend] chore(deps): update dependency react-intl to v10 by @renovate[bot] in #5315
- [backend/frontend] fix(settings): split settings into public & private api by @RomuDeuxfois in #5555
- [backend] chore(deps): update dependency org.springframework.security:spring-security-crypto to v6.5.10 by @renovate[bot] in #5600
- build(deps): bump postcss from 8.5.8 to 8.5.10 in /openaev-front by @dependabot[bot] in #5602
- [frontend] chore(deps): update dependency @casl/ability to v6.8.1 by @renovate[bot] in #5601
- [backend] fix(resource): validate user input for resource access (#5573) by @antoinemzs in #5574
- [backend] fix(rbac): BACKPORT fix 403 on access role (#5106) by @antoinemzs in #5605
- [tool] chore: migrate ci to github actions (#5586) by @guillaumejparis in #5135
- [backend] fix(injcts): fix delete inject statuses on simulation reset (#5608) by @antoinemzs in #5613
New Contributors:
- @Yohei-Yamamoto8182 made their first contribution in #5513
- @guzmud made their first contribution in #5541
- @raugier made their first contribution in #5516
Full Changelog: 2.3.3...2.3.4