1. 07 Sep, 2017 17 commits
  2. 06 Sep, 2017 8 commits
  3. 05 Sep, 2017 2 commits
  4. 02 Sep, 2017 3 commits
  5. 01 Sep, 2017 1 commit
    • Helmut Hummel's avatar
      [SECURITY] Fix unauthorized SOAP access · 0ecc7fc6
      Helmut Hummel authored
      By having an inverted condition, attackers
      could upload arbitrary extensions by only knowing
      the username and the extension key.
      
      When knowing a username of a TER admin,
      it was also possible to perform TER admin
      commands (like deleting extensions) via SOAP
      0ecc7fc6
  6. 31 Aug, 2017 2 commits
  7. 28 Aug, 2017 7 commits