IMPROVEMENTS
- Improved the Technologies page for detailed version information of technologies identified.
- Improved the target website deletion process to prevent any errors because of instantaneous action.
- Improved the scan compression algorithm.
- Add a new API endpoint (
api/1.0/issues/summary) for better issue reporting.
- Added
/api/1.0/scans/validate-imported-links-file to retrieve errors in the imported links.
- Added the last revived date parameter to the All Issues API endpoint.
- Improved the API endpoint to create team members and update their information.
- Improved the maximum scan duration to stop only those scans with the Scanning status.
- Added a token matching rule when it is required to get the token from a website other than the target URL.
- Added secure attribution for cookies.
- Added interval for Update Agents’ list on the installation wizard.
- Added the GUID control before getting the integration id to prevent any issue in the flow.
- Updated the scan control center to drop the difference between the unsuccessful resuming and pausing status.
- Improved the detection of whether the Jira instance is on the cloud or on-premises.
- Improved the ServiceNow Incident Management integration.
- Added active scan check when deleting an authentication profile.
- Improved the Invicti web application performance.
- Improved the website deletion process to block access to the associated file of the deleted website.
- Improved the Jira integration to add the Affected Versions as an option.
- Updated the TeamCity plugin that requires the Server URL and Domain URL to be the same.
- Improved the vulnerability report in which any credit card information is masked.
- Added the Authentication Verifier Service’s IP address to the setting to prevent it from being affected by the IP Restrictions.
- Improved the agent’s configuration file to specify a folder where the agent’s scan data is to be saved.
- Fixed case sensitivity when checking HTTP headers for JSON Web Tokens.
- Fixed missing CSP 3 Directive.
- Changed the Second Level Domain option on the Discovery Service to disabled by default.
- Improved the scanning of Burp files that are without XML extensions.
FIXES
- Fixed the scanner agent issue where the Linux agents failed because of TLS as a result of breaking changes in .NET 5.
- Fixed the configuration issue in a Docker scanner agent.
- Fixed the Hawk validation issue.
- Fixed the issue in the IAST installer that threw an error message despite successful installation.
- Fixed the basic authentication issue that threw an error although the credentials are correct in the scan profile.
- Fixed the business logic recorder issue that prevented the recorder to play recorded steps during a scan.
- Fixed the inconsistent number of vulnerability counts by severity information on the scan report page.
- Fixed the vulnerability serialization issue that caused the out-of-memory error.
- Fixed the scan scope issue that does not load the scan scope correctly on the first try.
- Fixed the scan profile issue that failed to register the database selected on the scan optimization page.
- Fixed the corrupted scan data ZIP file downloaded via an API endpoint.
- Fixed the silent installation issue in which the installation path cannot be located.
- Fixed the business logic recorder issue where the session is dropped because of a cookie.
- Fixed the sitemap issue that fails to show the site map after the scan.
- Fixed the null reference exception thrown in the new installation.
- Fixed the issue that fails to render the API document’s index page.
- Fixed the bug that threw an error when exporting a report.
- Fixed a bug that prevents the scanner from attacking to login and logout pages.
- Fixed the synchronization issue for the Discovery Service.
- Fixed an issue about header encoding that cause false positive CSP reporting.
- Fixed an issue that caused unhandled exceptions when there is no service endpoint definition in the WSDL file.
- Fixed null reference error during the SCIM User creation.
- Fixed the user interface issue to reflect the agent information on the Installed Framework accurately.
- Fixed the Hawk URL issue that is changed after the scan policy update via an API endpoint.
- Fixed the bug that throws a null reference exception at the authentication.
- Fixed the inconsistent risk level on the generated reports.
- Fixed the bug that throws a null reference exception at the authentication.
- Fixed the IPv6 registered website resolution issue thrown before scanning.
- Improved the maximum scan duration detection.
- Fixed the bug in which OAuth2 settings were not transferred properly from the web application to the agent.
- Fixed the bug that throws a null reference exception at the authentication.
- Increased the time out for the cloud PDF converter to prevent timeout-related errors.
- Fixed the issue with the DefectDojo report submission.
- Fixed the bug of excluding addressed issues in reports generated via Azure Pipeline Extension.
- Fixed the invalid elements issues in the RedHat agents.
REMOVED
- Removed the PCI DSS scan option on the New Scan page.