1. 14 Sep, 2017 1 commit
  2. 07 Sep, 2017 10 commits
  3. 06 Sep, 2017 4 commits
  4. 05 Sep, 2017 2 commits
  5. 02 Sep, 2017 1 commit
  6. 01 Sep, 2017 1 commit
    • Helmut Hummel's avatar
      [SECURITY] Fix unauthorized SOAP access · 0ecc7fc6
      Helmut Hummel authored
      By having an inverted condition, attackers
      could upload arbitrary extensions by only knowing
      the username and the extension key.
      
      When knowing a username of a TER admin,
      it was also possible to perform TER admin
      commands (like deleting extensions) via SOAP
      0ecc7fc6
  7. 31 Aug, 2017 1 commit
  8. 28 Aug, 2017 2 commits
  9. 26 Aug, 2017 1 commit
  10. 25 Aug, 2017 4 commits
  11. 24 Aug, 2017 2 commits
  12. 23 Aug, 2017 7 commits
  13. 22 Aug, 2017 1 commit
  14. 21 Aug, 2017 2 commits
  15. 20 Aug, 2017 1 commit