1. 02 Sep, 2017 2 commits
  2. 01 Sep, 2017 1 commit
    • Helmut Hummel's avatar
      [SECURITY] Fix unauthorized SOAP access · 0ecc7fc6
      Helmut Hummel authored
      By having an inverted condition, attackers
      could upload arbitrary extensions by only knowing
      the username and the extension key.
      
      When knowing a username of a TER admin,
      it was also possible to perform TER admin
      commands (like deleting extensions) via SOAP
      0ecc7fc6
  3. 31 Aug, 2017 2 commits
  4. 28 Aug, 2017 7 commits
  5. 26 Aug, 2017 2 commits
  6. 25 Aug, 2017 7 commits
  7. 24 Aug, 2017 2 commits
  8. 23 Aug, 2017 10 commits
  9. 22 Aug, 2017 2 commits
  10. 21 Aug, 2017 5 commits