Invicti Enterprise On-Demand 28 May 2024 v24.5.1

This update includes changes to the internal agents. The internal scan agent’s current version is 24.5.1. The internal authentication verifier agent’s current version is 24.5.1.

New Security Checks

• Added detection of Fortinet vulnerabilities (CVE-2020-12812, CVE-2019-5591, CVE-2018-13379)

Improvements

• Added a “Stop The Scan When Build is Aborted” option to the Jenkins integration

Fixes

• Fixed a bug in the user timeout session setting
• Resolved an issue with the frequency of out-of-date technology email notifications
• Removed email notifications for out-of-date technologies in failed scans
• Fixed an issue that was causing scans to be stuck in an async archiving state
• Fixed a bug in the automatic sign out functionality when the session timeout period has expired
• Fixed an issue in the detection of the ‘Improper XML parsing leads to Billion Laughs Attack’ vulnerability