openwisp / openwisp-controller

98%

master: 98%

LAST BUILD ON BRANCH advisory-fix-2

branch: advisory-fix-2

CHANGE BRANCH

x

Reset

• advisory-fix-2
• 0.8.x
• 1.0
• 1.0.x
• 1.1
• 1.1-1031
• 1.1-update-test_zerotier_vpn_client_template
• 1.2
• 1.2-fix-migration
• 1.2-fixes
• 1.3
• 1061-replace-thirdparty-jsonfield-with-django-builtin1
• Fx-VPN-templates-conflict
• add_missing_sample_config_tests_on_master
• adjust_test_selenium_for_custom_config
• advisory-fix-1
• allauth-update
• api-cleanup
• backport/1257-to-1.2-1772820939
• backport/1292-to-1.2-1773869681
• backport/1303-to-1.2-1774628819
• backport/1312-to-1.2-1774565802
• backport/1322-to-1.2-1774589082
• backport/1374-to-1.2-1779330620
• backport/1481-to-1.3-1790892882
• backport/1494-to-1.3-1790352155
• backport/1507-to-1.3-1792006152
• backport/1509-to-1.3-1792008470
• backport/1514-to-1.3-1792015442
• backport/1515-to-1.3-1792029642
• backport/1521-to-1.3-1792512689
• backport/1522-to-1.3-1792453763
• backport/1527-to-1.3-1792676661
• backport/1531-to-1.3-1792782738
• backport/1541-to-1.3-1794237005
• backport/1548-to-1.3-1793789328
• backport/1551-to-1.3-1793980779
• browser-error-helper
• bump-1.4.0a
• bump-deps
• bump-version
• changelog-bot-change-bang
• changelog/1.1.2
• channels-deps
• channels-live-server-tests
• check-ci
• chore/add-publiccode-parser-action
• chore/port-changelog-1.2.1
• chore/port-changelog-1.2.2
• chore/port-changelog-1.2.3
• chore/port-changelog-1.3.1
• chore/port-changelog-1.3.2
• chore/speedup-ci-1317
• chores/add-ci-failure-bot-caller
• chores/add-gsoc25-brances-in-ci
• chores/add-gsoc26-branch-in-ci
• chores/failure-bot-improvements
• ci
• ci/changelog
• ci/changelog-bot
• ci/changelog_bot
• ci/full-semver-action-pins
• ci/harden-github-actions
• ci/run-tests-on-1345-pull-requests
• ci/update-pr-validation-workflow
• ci/update-version-branch-workflow
• cleanup-deprecated-1-2-0
• config_app_label_in_selenium_tests
• crl-download-org-scope
• crypto-crl
• css-fixes
• dependabot/github_actions/actions/cache-5
• dependabot/github_actions/actions/cache-6
• dependabot/github_actions/actions/checkout-5
• dependabot/github_actions/actions/checkout-6
• dependabot/github_actions/actions/checkout-7
• dependabot/github_actions/actions/setup-python-6
• dependabot/github_actions/actions/setup-python-7
• dependabot/github_actions/actions/setup-python-7.0.0
• dependabot/github_actions/actions/setup-python-7.1.0
• dependabot/github_actions/pypa/gh-action-pypi-publish-1.12.2
• dependabot/github_actions/pypa/gh-action-pypi-publish-1.12.3
• dependabot/github_actions/pypa/gh-action-pypi-publish-1.12.4
• dependabot/github_actions/pypa/gh-action-pypi-publish-1.14.0
• dependabot/github_actions/pypa/gh-action-pypi-publish-1.14.2
• dependabot/github_actions/pypa/gh-action-pypi-publish-1.14.3
• dependabot/pip/django-cache-memoize-approx-eq-0.2.1
• dependabot/pip/django-flat-json-widget-approx-eq-0.3.1
• dependabot/pip/django-import-export-approx-eq-4.1.1
• dependabot/pip/django-import-export-approx-eq-4.3.10
• dependabot/pip/django-import-export-approx-eq-4.3.13
• dependabot/pip/django-import-export-approx-eq-4.3.14
• dependabot/pip/django-import-export-approx-eq-4.3.7
• dependabot/pip/django-import-export-approx-eq-4.3.8
• dependabot/pip/django-import-export-approx-eq-4.3.9
• dependabot/pip/django-import-export-approx-eq-4.4.0
• dependabot/pip/django-import-export-approx-eq-4.4.3
• dependabot/pip/django-redis-approx-eq-6.0.0
• dependabot/pip/django-redis-approx-eq-7.0.0
• dependabot/pip/django-reversion-approx-eq-6.0.0
• dependabot/pip/django-reversion-approx-eq-6.1.0
• dependabot/pip/django-reversion-approx-eq-6.4.0
• dependabot/pip/django-taggit-approx-eq-6.1.0
• dependabot/pip/djangorestframework-gis-approx-eq-1.2.1
• dependabot/pip/geoip2-gte-5.2.0-and-lt-6.0.0
• dependabot/pip/geoip2-gte-5.3.0-and-lt-6.0.0
• dependabot/pip/jsonfield-gte-3.2.0-and-lt-4.0.0
• dependabot/pip/paramiko-approx-eq-5.0.0
• dependabot/pip/paramiko-approx-eq-5.1.0
• dependabot/pip/paramiko-ed25519--approx-eq-3.5.1
• dependabot/pip/psycopg2-binary-approx-eq-2.9.10
• dependabot/pip/pytest-cov-approx-eq-6.1.0
• dependabot/pip/pytest-cov-approx-eq-6.1.1
• dependabot/pip/pytest-cov-approx-eq-6.2.1
• dependabot/pip/pytest-cov-approx-eq-7.0.0
• dependabot/pip/pytest-cov-approx-eq-7.1.0
• dependabot/pip/pytest-timeout-approx-eq-2.4.0
• dependabot/pip/responses-approx-eq-0.25.6
• dependabot/pip/responses-approx-eq-0.25.7
• dependabot/pip/responses-approx-eq-0.25.8
• dependabot/pip/responses-approx-eq-0.26.0
• dependabot/pip/responses-approx-eq-0.26.1
• dependabot/pip/responses-approx-eq-0.26.2
• dependabot/pip/responses-approx-eq-0.26.3
• dependabot/pip/scp-approx-eq-0.16.0
• dependabot/pip/scp-approx-eq-0.16.1
• dependabot/pip/scp-approx-eq-0.16.2
• deps-dev-branch-urls
• deps-django-42
• device-id-consistency
• device-ip-admin-search
• device-location-api-validation
• devicecommand_organisation_bug
• deviceconnection_detail_view_typo
• docs/websocket_API_created
• drop-python-3.9
• escape-admin-user-data
• estimated-location-warning-inline
• feat/python-314-315-ci-support
• feature/1157-new-ws-endpoint-for-all-location
• feature/1344-mass-command-execution-pipeline
• feature/1345-mass-command-admin-workflow
• feature/1347-mass-command-admin-action
• feature/828-api-indoor-map-coordinates
• feature/894-rest-api-revisions
• feature/backport-workflow
• feature/bot-autoassign
• feature/vpn-cache-invalidation-1098
• filippociandy/ow_zt-to-global
• fix-celery-sync-execution
• fix-ci
• fix-ci-allocation-isolation
• fix-command-input-data-type
• fix-command-modified-timestamp
• fix-command-none-connection-guard
• fix-command-null-connection
• fix-command-str-null-input
• fix-common-name-bug
• fix-config-checksumdb-migration
• fix-config-problem-notification
• fix-connection-task-logger-test
• fix-deprecated-uuid-admin
• fix-device-get-deferred-values
• fix-django-loci-deps
• fix-django-styling
• fix-docs
• fix-docs-reference
• fix-geo-api-floorplan-geometry-multipart
• fix-launch-command-idempotency
• fix-launch-command-logging
• fix-migrations
• fix-modified-timestamp
• fix-multivaluedictkeyerror-1057
• fix-name-replace
• fix-org-limits-screenshot
• fix-recreating-vpn-client
• fix-refresh-from-db-missing-call
• fix-related-device-model-perm-mixin
• fix-relevant-templates
• fix-sample-users
• fix-send-command-updates
• fix-subnet-division-invalidates-checksum-cache
• fix-subnet-division-ip-index
• fix-test-technical-debt
• fix-test_update_vpn_server_configuration
• fix-tests-sample-users
• fix-typos
• fix-update-strategy-typo
• fix-vpn-auto-client
• fix-vpnclient-inconsistent-checksum
• fix-whois-deactivated
• fix/1221-vpn-peer-cache-desync
• fix/1221-vpn-peer-cleanup
• fix/1424-ssh-timeout-cleanup
• fix/1434-prevent-deleting-in-use-subnet-division-rule
• fix/deactivation-test-exercises-correct-path
• fix/fix-mentioning-ci-failure-bot
• fix/generic-cache-invalidation
• fix/get-common-name-device-mutation
• fix/invalidate-controller-views-cache-on-org-context-change
• fix/manage-devices-group-templates-return-to-continue
• fix/organization-cascade-delete-active-devices
• fix/reconcile-config-status-on-checksum-request
• fix/register-field-allowlist
• fix/register-skip-push-update-attribute-error
• fix/remove-validated-serializer-workaround
• fix/ssh-configurable-host-key-policy
• fix/ssh-connection-leak
• fix/update-config-self-detection
• fix/update-config-ssh-leak-silent-failure
• fix/update-config-task-self-match
• fix/vpn-get-common-name-device-mutation
• fix/vpn-server-cert-validation
• fix_ignored_command_timeout
• fix_migration_graph
• fix_widget_hard_coded_url
• flaky-ci
• gsoc23
• gsoc25-map
• gsoc25-whois
• gsoc25-whois-modified
• gsoc26-mass-commands
• gsoc26-x509-certificate-generator-templates
• guard_fork_workflow
• improve-help-texts-variables-metadata
• issue/1040-added-recency-tests
• issues/1003-vpn-api-subnet-details
• issues/1016-command-connection-check
• issues/1024-update-config-self-detection
• issues/1026-whois-display
• issues/1034-fuzzy-location-creation
• issues/1035-fuzzy-task-alert
• issues/1047-send-command-docs
• issues/1049-send-generic-message
• issues/1058-update-whois
• issues/1064-cache-vpn-configuration
• issues/1070-device-config-status
• issues/1071-device-group-filter-label
• issues/1095-generic-cache-invalidation
• issues/1096-prevent-changes-in-ipam
• issues/1097
• issues/1110-crash-without-superuser-permission
• issues/1128-update_config
• issues/1133-perennial-config-modified
• issues/1162-replace-hardcoded-colors-with-ow-vars
• issues/1204-celery-execution-skip
• issues/1204-celery-update-config-self-detection
• issues/1224-separate-geo-logic-from-config
• issues/1231-fallback-fileds-db-migrations
• issues/1263-fix-modified-timestamp
• issues/1334-reassign-shared-default-templates-on-org-change
• issues/1338-generic-deactivated-device
• issues/1356-extend-abstract-template
• issues/1370-jsonfield-fix
• issues/1393-disabled-org
• issues/1419-prevent-deleting-in-use-cert
• issues/1426-zerotier-vpn-name-coupling
• issues/1430-flapping-whois-estimated-locations
• issues/1457-partial-api-view-support
• issues/1467-prevent-renewing-revoked-certs
• issues/1468-reserved-host-route-subnets
• issues/1478-template-api-corrections
• issues/1510-preserve-device-location-patch
• issues/1546-django-6-support
• issues/1552-whois-cidr-index
• issues/204-sortedm2m-queries
• issues/385-sync-floorplan-organization
• issues/442-fix-tests-monitoring
• issues/480-auto-add-templates
• issues/525-disable-advanced-editor-for-commands
• issues/560-readonly-map
• issues/682-NoReverseMatch-error
• issues/700-org-config-settings-api
• issues/753-ubnet-division-rule-white-space
• issues/789-disallow-changing-configuration-backend-ui
• issues/809-custom-command-expects-string-type
• issues/812-ui-command-highlight
• issues/818-show-inherited-vars
• issues/831-delete-vpnclients
• issues/832-multiple-template-same-vpn
• issues/836-template-history
• issues/844-subnet-division-rule-organization
• issues/848-readonly-config-field
• issues/868-preview-keyboard-keys-selenium-test
• issues/902-fix-selenium-unsaved-changes
• issues/904-asgi-browser-tests
• issues/922-mac-address-uppercase
• issues/936-recovering-device-with-location
• issues/949-delete-offline-devices
• issues/953-test-failures-with-python-3.12
• issues/964-update_config
• issues/ci-build-failing
• issues/device-location-floorplan-filter
• leaflet-withforms
• limit-recent-comands
• location-api-uuid
• master
• misc-fixes
• move-architecture-callouts
• openwrt-change-password-quoting
• paramiko-4.0.0
• password-based-token-sample-app
• patch-1
• prettier
• publiccode-update
• qa
• recent-commands-tab
• refactor/selenium-helpers
• release-1.1.1
• release-1.1.2
• release/1.2.0
• release/1.2.2
• release/1.2.3
• release/1.3.0
• release/1.3.1
• release/1.3.2
• remove-main
• replicate-version-branch
• reversion-6.2.0
• runtests
• sameerrandive-dev/issue-1428-vpnclient-block-modifications
• selenium-template-wait
• session_cache_enabled
• stabilize-command-selenium-test
• test-hanging
• tests/launch-command-timeout-exception
• trigger-vpn-endpoint
• update-ci-failure-bot
• update-geo-tests
• update-hostname-on-registration
• update-migrations-users-expiration-date
• update-selenium-tests
• updated-multitenant-tests
• utils-pagination
• vpn-template-validation
• whois-estimated-locations-improvements
• whois-quota-cooldown

Build # 39999279664

Build Type

Pull #1531

github

Committed by web-flow

Commit Message

Merge 2107739e9 into a128db00d

Pull Request Pull Request #1531: [fix] Prevented cross-organization configuration access in admin

Coverage Stats

7869 of 8000 relevant lines covered (98.36%)

7.87 hits per line