Security problems uncovered by audit

Catégorie

fusiondirectory-security/fd~901

Séverite

fusiondirectory-security/fd~906

Quel est le problème rencontré ?

un audit suisse a decouvert quelques problemes de securite sur fusiondirectory

Comment reproduire le problème ?

lire le pdf joint

FusionDirectory-1.3-Multiple-Flaws.pdf

changed due date to April 21, 2020

By bmortier on 2020-04-14T16:03:11 (imported from GitLab)

added support label

hello,

on a deja eu des correctifs mais qui ne semblent pas tous efficaces

possible xss in login screen https://gitlab.fusiondirectory.org/fusiondirectory/fd/-/issues/3316

Security: Missing Security Headers https://gitlab.fusiondirectory.org/fusiondirectory/fd/-/issues/5842

By bmortier on 2020-04-14T16:17:17 (imported from GitLab)

added 30m of time spent at 2020-04-14

By bmortier on 2020-04-14T16:17:17 (imported from GitLab)

changed title from un audit suisse a decouvert quelques problemes de securite sur fusiondirectory to Security problems uncovered by audit

By Côme Chilliet on 2020-06-30T07:54:11 (imported from GitLab)

made the issue confidential

By bmortier on 2020-12-15T09:29:42 (imported from GitLab)

removed due date

By bmortier on 2020-12-15T09:30:22 (imported from GitLab)

changed milestone to %FusionDirectory 1.3.1

added PJ1802-0188 Security labels

added FSA-0021 label

made the issue visible to everyone

By bmortier on 2020-12-15T09:59:29 (imported from GitLab)

created merge request !842 to address this issue

By Côme Chilliet on 2020-12-15T10:00:08 (imported from GitLab)

mentioned in merge request !842

By Côme Chilliet on 2020-12-15T10:00:30 (imported from GitLab)

mentioned in commit 47071e8a

By Côme Chilliet on 2020-12-15T10:06:43 (imported from GitLab)

mentioned in commit e69bdd3b

By Côme Chilliet on 2020-12-15T10:06:43 (imported from GitLab)

mentioned in commit 32e9a70d

By Côme Chilliet on 2020-12-15T10:06:44 (imported from GitLab)

mentioned in commit 34bc3da2

By Côme Chilliet on 2020-12-15T10:40:18 (imported from GitLab)

mentioned in commit 1e1704ca

By Côme Chilliet on 2020-12-15T10:40:19 (imported from GitLab)

mentioned in commit 9f772bc9

By Côme Chilliet on 2020-12-15T10:40:19 (imported from GitLab)

added To Be Tested label

added 2h of time spent at 2020-12-15

By Côme Chilliet on 2020-12-15T10:52:47 (imported from GitLab)

mentioned in issue #6086

By Côme Chilliet on 2020-12-15T14:08:59 (imported from GitLab)

marked this issue as related to #6086

By Côme Chilliet on 2020-12-15T14:09:29 (imported from GitLab)

The fixes are not needed on 1.4-dev branch

By Côme Chilliet on 2020-12-15T15:11:22 (imported from GitLab)

added 15m of time spent at 2020-12-15

By Côme Chilliet on 2020-12-15T15:11:23 (imported from GitLab)

Tested on fixes (demo-fixes) and I couldn't reproduce the issues

By Jonathan Swaelens on 2021-01-18T13:56:29 (imported from GitLab)

closed

added 30m of time spent at 2021-01-18

By Jonathan Swaelens on 2021-01-18T13:56:30 (imported from GitLab)

removed To Be Tested label