Skip to content

Version 2.3.4

Choose a tag to compare

@guillaumejparis guillaumejparis released this 11 May 14:26
36332ce

Enhancements:

  • #5586 Migrate CI pipelines to GitHub Actions
  • #5139 Simulations with a large number of simultaneously executed injects may cause a database lockup

Bug Fixes:

  • #5609 [Wis] Inject fails when targeting individual player instead of team
  • #5608 [Wis] Simulation reset does not update inject state (reset ineffective)
  • #5573 Agent, implant binaries requests don't validate user input
  • #5540 Basic Dockerfile not building anymore
  • #5537 Unable to Create Lessons Learned
  • #5512 [frontend] Japanese locale (ja.json) contains critical mistranslations and inconsistencies
  • #5106 Read only permissions will lead to error in home dashboard
  • #1785 [security] Cross-Site Request Forgery (CSRF)

Pull Requests:

  • [backend] fix(connectors): improving connector instance query (#5139) by @savacano28 in #5406
  • [frontend] chore(deps): update dependency dompurify to v3.4.0 [SECURITY] by @renovate[bot] in #5478
  • [backend] chore(deps): update aws-java-sdk-v2 monorepo to v2.42.35 by @renovate[bot] in #5530
  • [frontend] chore(deps): update dependency html-react-parser to v6 by @renovate[bot] in #5429
  • [backend] chore(deps): update aws-java-sdk-v2 monorepo to v2.42.36 by @renovate[bot] in #5546
  • [frontend] chore(deps): update dependency @ckeditor/ckeditor5-react to v11.1.2 by @renovate[bot] in #5547
  • [frontend] fix: fix 267 Japanese translation errors and unify terminology (#5512) by @Yohei-Yamamoto8182 in #5513
  • [backend] fix(api): prevent IDOR on inject endpoints by validating parent ownership by @RomuDeuxfois in #5527
  • [tool] fix(dockerfile): missing corepack and patches (#5540) by @guzmud in #5541
  • [frontend] chore(deps): update dependency qs to v6.15.1 by @renovate[bot] in #5563
  • [frontend] chore(deps): update dependency uuid to v14 [SECURITY] by @renovate[bot] in #5564
  • [frontend] chore(deps): upgrade monocart-reporter, dompurify by @antoinemzs in #5568
  • [tool] chore: add ci for testing-xtm-one (#1) by @raugier in #5516
  • [frontend] fix(lessons): fix the lessons learned creation (#5537) by @camrrx in #5558
  • [backend] fix(tests): fix integration tests by @RomuDeuxfois in #5577
  • [backend] fix(security): add csrf token management (#1785) by @gabriel-peze in #4956
  • [backend] chore(deps): update aws-java-sdk-v2 monorepo to v2.42.37 by @renovate[bot] in #5585
  • [backend] chore: add execution time logging to job execution methods by @guillaumejparis in #5466
  • [backend] fix(account): make password reset asynchronous (#0000) by @antoinemzs in #5528
  • [frontend] chore(deps): update dependency react-intl to v10 by @renovate[bot] in #5315
  • [backend/frontend] fix(settings): split settings into public & private api by @RomuDeuxfois in #5555
  • [backend] chore(deps): update dependency org.springframework.security:spring-security-crypto to v6.5.10 by @renovate[bot] in #5600
  • build(deps): bump postcss from 8.5.8 to 8.5.10 in /openaev-front by @dependabot[bot] in #5602
  • [frontend] chore(deps): update dependency @casl/ability to v6.8.1 by @renovate[bot] in #5601
  • [backend] fix(resource): validate user input for resource access (#5573) by @antoinemzs in #5574
  • [backend] fix(rbac): BACKPORT fix 403 on access role (#5106) by @antoinemzs in #5605
  • [tool] chore: migrate ci to github actions (#5586) by @guillaumejparis in #5135
  • [backend] fix(injcts): fix delete inject statuses on simulation reset (#5608) by @antoinemzs in #5613

New Contributors:

Full Changelog: 2.3.3...2.3.4