Skip to content

Release v0.5.1

Choose a tag to compare

@s3inlc s3inlc released this 27 Mar 15:13
· 2593 commits to master since this release

Bugfixes

  • Fixed missing file assignments when applying preconfigured tasks from hashlists view (issue #354)
  • Fixed cracker binary relation error when applying supertasks from hashlist view
  • Fixed XSS vulnerability with the login forward variable
  • Session cookies have the httpOnly flag set
  • Fixed file upload which allowed upload of file:// data and reading it
  • Fixed renaming of files which allowed renaming them to other directories and execute them
  • Fixed renaming/uploading of files which allowed to override hidden files (e.g. .htaccess file)