5.3.3

2018-06-27 Security1 Tweak1 Fix1

Security

  • Fixed SQL injection vulnerability in the logs page. Note: Admin privileges are required to exploit this vulnerability. Thanks to Çlirim Emini, Penetration Tester at sentry.co.com, for reporting this vulnerability.

Tweaks

  • Recommend Strong Passwords and Refuse Compromised Passwords in the Grade Report.

Fixes

  • Provide default values for enabled requirements.