Engineering / ENG-1837
Pen test 2026: the four low findings
Description
From the penetration test report received on Friday, 23 October (Confluence SEC › Penetration test 2026): no critical or high findings, three medium, four low. The low ones, for next quarter:
| # | Finding | Owner |
|---|---|---|
| L1 | The portal's content security policy is in report-only mode | Aiko |
| L2 | A failed metadata upload shows the parser's error message | Marek |
| L3 | The status page accepts old TLS ciphers | Oskar |
| L4 | A cookie without the SameSite attribute on the portal's language switch | Aiko |
Comments (0)
No comments.