cerebrate-project
/
cerebrate
mirror of https://github.com/cerebrate-project/cerebrate
1
0
Fork 0
Code Issues Releases Wiki Activity
cerebrate/templates/element/genericElements/IndexTable/Fields
History
iglocska 495c4ee93c
fix: [security] XSS in the generic action template 
- a previously assumed internal url can have user input appended via the MISP local tool connector
- requires a compromised connected MISP instance where a malicious administrator modifies the UUIDs of cerebrate relevant objects to JS payloads

- as reported by Dawid Czarcnecki of Zigrin Security
 		2022-02-20 12:07:06 +01:00
..
actions.php fix: [security] XSS in the generic action template 2022-02-20 12:07:06 +01:00
alignments.php chg: [bootstrap] Migrated APP to use bootstrap v5.x 2021-09-17 13:04:37 +02:00
array.php wip: initial connectors 2021-04-30 23:59:53 +02:00
array_lookup_field.php chg: [templates] updated to support the new functionalities of localtools 2021-06-01 07:46:29 +02:00
authkey.php chg: [bootstrap] Migrated APP to use bootstrap v5.x 2021-09-17 13:04:37 +02:00
boolean.php chg: [bootstrap] Migrated APP to use bootstrap v5.x 2021-09-17 13:04:37 +02:00
caching.php new: [baseurl] added better baseurl handling 2021-02-09 22:10:26 +01:00
connection_test.php new: [UI] connection test field added for the brood index 2021-01-13 14:29:54 +01:00
correlations.php new: [baseurl] added better baseurl handling 2021-02-09 22:10:26 +01:00
count_summary.php new: [baseurl] added better baseurl handling 2021-02-09 22:10:26 +01:00
datetime.php new [Authkey] implementation ready 2020-08-07 21:47:04 +02:00
distribution_levels.php new: [baseurl] added better baseurl handling 2021-02-09 22:10:26 +01:00
expiration.php chg: [bootstrap] Migrated APP to use bootstrap v5.x 2021-09-17 13:04:37 +02:00
function.php chg: [wip] localtools 2021-06-14 08:37:00 +02:00
generic_field.php chg: [wip] localtools 2021-06-14 08:37:00 +02:00
health.php wip: initial connectors 2021-04-30 23:59:53 +02:00
icon.php chg: [UI] some adjustements to make both themes less awkward 2020-06-23 14:26:41 +02:00
json.php fix: [JSON fields] fixed escaping issues 2021-11-17 15:58:52 +01:00
links.php chg: [restructure] the application 2020-06-22 14:28:17 +02:00
list.php chg: [restructure] the application 2020-06-22 14:28:17 +02:00
local_tools_status.php chg: [no-wrap] connections 2021-06-11 14:42:08 +02:00
org.php fix: [generic fields] org field URL missing slash fixed 2022-01-28 00:51:09 +01:00
owner.php chg: [bootstrap] Migrated APP to use bootstrap v5.x 2021-09-17 13:04:37 +02:00
role.php new: [baseurl] added better baseurl handling 2021-02-09 22:10:26 +01:00
selector.php chg: [genericElement:index_table] Generic support of bulk operations 2021-06-23 11:15:22 +02:00
self_registration.php new: [baseurl] added better baseurl handling 2021-02-09 22:10:26 +01:00
sparkline.php chg: [restructure] the application 2020-06-22 14:28:17 +02:00
tag.php chg: [tag] Continuation of integrating tagging plugin - WiP 2021-08-30 15:11:21 +02:00
tags.php chg: [tag] Continuation of integrating tagging plugin - WiP 2021-08-30 15:11:21 +02:00
target_event.php new: [baseurl] added better baseurl handling 2021-02-09 22:10:26 +01:00
tester.php chg: [restructure] the application 2020-06-22 14:28:17 +02:00
timestamp.php chg: [restructure] the application 2020-06-22 14:28:17 +02:00
toggle.php chg: [element:indexTable] Changed notification behavior of toggle field 2021-03-10 09:40:08 +01:00
user.php new: [inbox] First version of Inbox system and requestProcessors - WiP 2021-03-15 22:47:13 +01:00