Invicti update introduces Chinese language support in the UI, path fragments in site structure, and new vulnerability checks

A new Invicti update has been released for Windows and Linux: 13.0.200807155 and macOS: 13.0.200807156.

This Invicti update introduces Chinese language support in the UI, allowing Chinese users of Invicti to browse the Invicti UI and read vulnerability data in their language. The new build shows path fragments in the site structure of a scan and introduces new vulnerability checks for Rails, SAP NetWeaver, Atlassian Jira, and others. In addition, there are numerous updates and fixes, all of which are available for all editions of Invicti.

New Features

• Invicti is now available in Simplified Chinese
• Path fragments are now shown in the site structure

New Vulnerability Checks

• New check for insecure inline frames
• New check for remote code execution of user-provided local names in Rails
• New check for SAP NetWeaver RECON auth bypass vulnerability
• New check for H2 console publicly accessible
• New check for PHP version disclosure
• New check for Atlassian Jira Service Desk misconfiguration
• New test for Jolokia XML external entity (XXE) vulnerability
• New checks for WordPress core, WordPress themes, WordPress plugins, Joomla, and Drupal

Updates

• Created and Last Updated dates are available for vulnerabilities
• Order of sections in the Comparison report has been updated to be more intuitive
• Target address is shown in full in the UI
• The /users/ endpoint is now available in the API

Fixes

• Fixed an issue when exporting vulnerabilities to WAF when they contained CVSS3.1
• Fixed an issue causing the custom user-agent to not be used in all requests during a scan
• Fixed issues causing some vulnerabilities not to be well formatted when sent to the Jira issue tracker
• Fixed an issue when adding Jira issue tracker in Invicti Online
• Fixed an issue caused when adding targets to an existing target group
• Minor fix in Comprehensive report text
• Fixed a UI issue showing a blank list (scans, targets, etc.) when using the browser back button
• Fixed an issue caused by scanning targets with complex GraphQL schemas

Upgrade to the Latest Build

If you are already using Invicti build 13.x, you can initiate the automatic upgrade from the new build notification in the Invicti UI > About page.

If you are using Invicti build 12.x or earlier, you need to download Invicti from here. Use your Invicti license key to download and activate your product.

THE AUTHOR

Nicholas Sciberras
Principal Program Manager
LinkedIn

As the Principal Program Manager, Nicholas is passionate about IT security and technology at large. Prior to joining Acunetix in 2012, Nicholas spent 12 years at GFI Software, where he managed the email security and anti-spam product lines, led multiple customer service teams, and provided technical training.