Release Notes 2023.4.0

New features and enhancements in Seeker 2023.4.0.

Vulnerability Breakdown

The Application Security dashboard has been enhanced by the new Vulnerability Breakdown section that displays vulnerabilities grouped by their functional categories. You can expand and explore each category and subcategory, view related informative texts, and easily access the underlying vulnerabilities.



Related Information: Vulnerability Breakdown

Usability improvements

  • The option to display HTTP responses with reported vulnerabilities is now available for any checker detecting vulnerabilities that could be triggered by an HTTP request. This option is enabled by default for the checkers in which responses are most useful to understand the vulnerability context. You can enable or disable it for any relevant checker.
    Note: HTTP responses won't be displayed for the vulnerabilities detected prior to installing this version.

    Related Information: Configure a checker, HTTP request details

  • In addition to other bulk actions, you can now export selected vulnerabilities to an external file or PDF report. Combined with filtering, this gives you flexibility to create highly customized vulnerability reports.

    Related Information: Perform bulk actions for selected vulnerabilities

Agents

The Seeker Agents have been enhanced with the following features:

Technologies Features
Java

The Java Agent now supports:

  • Tracking of unsafe data transmitted across projects over gRPC.
  • Applications using Java 20.
  • Applications using the Spring WebFlux framework.
Node.js As of this release, the Agent supports Node.js versions 12.0.0 and higher. Versions 10.x. and 11.x are no longer supported.

You can still test applications written in those versions using an Agent version prior to 2023.4.0.

Python
  • API specifications, collected by Seeker from your Python applications built with the FastAPI framework, are now available from the Endpoint Risk dashboard.
  • The Python Agent now supports Active Inspection of untested APIs.

Checkers

The following vulnerability checkers have been added, enhanced, or changed:

Technologies Name New/Enhanced/Changed
Python XML External Entity Injection

XML External Entity Injection (Second-Order)

New

Documentation

A new article has been added to the Troubleshooting Guide:

Agents Deployed on Kubernetes using Admission Controller