MISP
/
MISP
mirror of https://github.com/MISP/MISP
2
2
Fork 0
Code Issues Releases Wiki Activity
25,705 Commits
34 Branches
364 Tags
187 MiB
Commit Graph

25705 Commits (v2.4.192)

Author SHA1 Message Date
Sami Mokaddem d682d92973
chg: [component:CRUD] Added support of afterFind in the delete function 2024-05-03 15:28:23 +02:00
iglocska b6769c5f58
chg: [schema] fix 2024-05-03 15:01:28 +02:00
iglocska d3324b6172
fix: [redirect loops] fixed for users that haven't done multiple mandatory tasks during login yet 
- such as email OTP, change PW, read the news, etc.
 2024-05-03 13:45:36 +02:00
iglocska f4f378159e
fix: [news UI] fixed notice error 2024-05-03 13:41:07 +02:00
iglocska 64f2fd9c31
fix: [security tests] removed otp_disabled check for email otp endpoint 
- the two are distinct features
 2024-05-03 12:54:41 +02:00
iglocska bf909d5fff
fix: [OTP] restored 2024-05-03 12:08:43 +02:00
iglocska 9f3735c5c2
fix: [Email OTP] invalid ACL check reverted, allowing the feature to function again 2024-05-03 08:16:28 +02:00
iglocska 6f2e162fd8
fix: [evnet view] excluding correlations should also exclude over_correlated attributes, fixes #9366 2024-05-02 21:35:23 +02:00
iglocska 4f2638b687
Merge branch 'develop' into 2.4 2024-05-02 15:33:26 +02:00
iglocska 7490bd19e7
chg: [VERSION] bump 2024-05-02 15:33:10 +02:00
Sami Mokaddem 18b0d3c22d
chg: [analyst-data:view] Removed the redundant UUID popover button from the UUID field 2024-05-02 15:14:50 +02:00
Sami Mokaddem 3ae6351509
chg: [analyst-data:beforeSave] Make sure to set distribution to default value if not provided 2024-05-02 15:14:18 +02:00
Sami Mokaddem 70c01ae049
Merge branch 'develop' of github.com:MISP/MISP into develop 2024-05-02 15:13:48 +02:00
Sami Mokaddem b5ce3e99a4
fix: [workflow:workflow-shell] Make sure a user is set when using non-blocking workflow 
- Fix #9722
- Thanks to @microblag for the proposed fix
 2024-05-02 15:12:12 +02:00
iglocska cdfc12008c
fix: [external auth] fixed auth logging generating notices, fixes #9445 2024-05-02 13:47:40 +02:00
iglocska ecc4087b08
Merge branch 'develop' of github.com:MISP/MISP into develop 2024-05-02 12:11:36 +02:00
iglocska 8dbe02d115
fix: [analystdata] don't include the parent via the viewAnalystData endpoints 2024-05-02 12:08:23 +02:00
Sami Mokaddem a87ca3b4d7
chg: [analyst-data:UI] Removed dep libraries 2024-05-02 11:49:54 +02:00
iglocska d6d4c8e08a
fix: [UI] added missing views 2024-05-02 11:41:23 +02:00
iglocska 2aa4b95de6
fix: [UI] removed dumb check 2024-05-02 11:40:14 +02:00
iglocska 2b1d2cb344
fix: [analystdata] ui fixes 2024-05-02 11:37:54 +02:00
iglocska 523fd1e121
new: [analyst data] missing views added 2024-05-02 11:30:12 +02:00
iglocska 304581e2b6
Merge branch 'develop' of github.com:MISP/MISP into develop 2024-05-02 11:27:20 +02:00
iglocska 4795d9c183
fix: [analyst data] UI changes to make the loading on demand in the event view 2024-05-02 10:17:44 +02:00
Sami Mokaddem 9a0f13c244
Merge branch 'feature/analyst-data-api' into develop 2024-04-29 14:13:34 +02:00
Sami Mokaddem 51c00f434d
Merge branch 'develop' of github.com:MISP/MISP into feature/analyst-data-api 2024-04-29 14:12:07 +02:00
Sami Mokaddem 021ae24e3f
fix: [logs] Fixed bug in paginating logs 2024-04-29 14:11:44 +02:00
Sami Mokaddem 002749d5d9
chg: [analyst-data] Added support of capturing analyst-data nested in attributes, events, eventreports and objects 2024-04-29 14:11:04 +02:00
Alexandre Dulaunoy 8f56d8cef8
chg: [warning-lists] updated to the latest version 2024-04-26 16:46:18 +02:00
Alexandre Dulaunoy 724a361bd3
chg: [misp-galaxy] updated to the latest version 2024-04-26 16:45:43 +02:00
Alexandre Dulaunoy a4a4b8c1dc
chg: [misp-objects] updated to the latest version 2024-04-26 16:45:20 +02:00
Jakub Onderka 902c99ac82
Merge pull request #9690 from JakubOnderka/opt_disabled 
new: [security] Make possible to disable (T/H)OTP
 2024-04-26 13:40:56 +02:00
Jakub Onderka bbb5ee96ab
Merge pull request #9700 from JakubOnderka/oidc-issuer-fix 
fix: [oidc] Fix issuer if not set
 2024-04-26 13:40:38 +02:00
iglocska 3d3a207d4d
chg: [UI] clicking on your user name should bring up the user profile, fixes #9708 2024-04-26 10:41:03 +02:00
iglocska 947dbe1085
fix: [event add] default value of threat level ID correctly injected into the form, fixes #9714 2024-04-26 10:15:52 +02:00
iglocska 66532a095c
Merge branch '2.4' into develop 2024-04-26 08:47:04 +02:00
iglocska 14106b811a
fix: [freetext] ip-src/ip-dst meta-type didn't have a valid category list 2024-04-26 08:43:00 +02:00
iglocska ee196c1349
fix: [user registration] pgp key not saved from the registration 2024-04-26 08:32:39 +02:00
Sami Mokaddem 7416a9dd97
fix: [logs:index] Fixed UI pagination in application logs 2024-04-25 14:46:22 +02:00
iglocska 89a6cbdfe6
Merge branch 'develop' of github.com:MISP/MISP into develop 2024-04-23 15:12:30 +02:00
iglocska b6a8d43bbd
Merge branch 'browscap_default' into develop 2024-04-23 15:12:17 +02:00
Andras Iklody d629922a7f
Merge pull request #9697 from Wachizungu/add-orgc-filter-for-galaxy-clusters-index 
fix: [galaxy_clusters] Add orgc filter option for index, set it as de…
 2024-04-23 15:10:21 +02:00
iglocska 91e1c27746
Merge branch '2.4' into develop 2024-04-23 15:08:50 +02:00
iglocska cd25980da9
fix: [sql logs] captured when benchmarking is enabled but debug level is < 2 2024-04-23 15:03:22 +02:00
iglocska ed790e2ab7
Merge branch '2.4' into develop 2024-04-23 14:54:47 +02:00
iglocska 597977694d
fix: [security] stored XSS in the correlation top list 
- if an attribute with an XSS payload as its value ends up being in the top list of correlations, then an administrator viewing the top correlations would execute the XSS

- as reported by Grzegorz Misiun
 2024-04-23 14:51:58 +02:00
iglocska 4c75abbb70
new: [fast api auth] added 
- added a new optional functionality to temporarily store hashed API keys in redis
  - The duration of the temporary storage is controllable by a setting (defaults to 3 minutes)
  - the hashing function used is an hmac sha-512 function, with the key being stored in a generated file on the instance
  - this cuts the query times of extremely fast endpoints down drastically on heavy repeated use (such as warninglists/checkValue)
 2024-04-23 13:23:31 +02:00
iglocska b46d5a433e
Merge branch 'develop' of github.com:MISP/MISP into develop 2024-04-23 13:23:04 +02:00
iglocska 7c5d052105
new: [fast api auth] added 
- added a new optional functionality to temporarily store hashed API keys in redis
  - The duration of the temporary storage is controllable by a setting (defaults to 3 minutes)
  - the hashing function used is an hmac sha-512 function, with the key being stored in a generated file on the instance
  - this cuts the query times of extremely fast endpoints down drastically on heavy repeated use (such as warninglists/checkValue)
 2024-04-23 13:20:45 +02:00
Sami Mokaddem a12f21ff61
fix: [workflow:ui] Make sure to use full available width 2024-04-23 07:47:13 +02:00