Ghostwriter v3.2.0

[chrismaddalena]

Summary

This release includes significant enhancements, including support for adding tags to most objects (e.g., log entries, projects, domains).

[v3.2.0] - 2 February 2023

Added

• Added support for applying tags to clients, projects, reports, findings, domains, servers, logs, and log entries
• Added whitecards and deconflictions nodes to the GraphQL schema for projects
• Added a notification to finding forms that warns you if another user has submitted changes to the same finding
• Added a button to project scope forms to split comma-delimited scope lists into separate lines automatically

Fixed

• Fixed the wrong avatar appearing in the corner when viewing another user's profile
• Fixed unnecessary scrolling animation that could occur when clicking a tab in certain browsers

Changed

• All new log view page with improved editing functionality
  • Selections for showing/hiding a column are now persistent between page visits and refreshes
  • Editing table rows now use a modal and allows all fields to be edited and saved at once
• The web UI now supports customizing the severity category titles
• Changed project assignments to allow the same person to be assigned more than once as long as the date ranges do not overlap
• You can clear the docx or pptx template selected for a report
  • If you clear the template, the default template will be used instead
  • If you do not have a default template configured, the report will not be able to be generated
• A domain's "reset DNS" flag will now default to true when creating a new domain
• Moved all CSS and JavaScript files to local hosting for instances where Ghostwriter is running on a system without any internet access
• The IP address field for project targets now accepts individual IP addresses and CIDR ranges (Closes #211)
• Report templates can now be flagged as landscape for tracking (Reference #281)
• Various web UI and scripting improvements for better performance, usability, and accessibility

Security

• Proactively upgraded core dependencies and base OS images to their latest stable versions
• Applied additional sanitization to user-editable strings that may appear in HTML to address potential XSS vulnerabilities
• Updated TinyMCE to the latest v5 to address CVE-2022-23494 (Reference CVE-2022-23494)

---

This discussion was created from the release Ghostwriter v3.2.0.