This release brings significant changes to existing challenges (:zap:) which might break canned CTF setups as well as solution guides made for previous versions of OWASP Juice Shop!
🎯 Challenges
- #1576: Added "Local File Read" challenge (kudos to @cigar-galaxy82 for implementing and @CaptainFreak for the idea)
- #1491: Removed "Login CISO" challenge due to Google no longer accepting
X-User-Emailheader during OAuth login (:zap:) - Updated links in quarantine folder to point to new malware location at https://github.com/juice-shop/juicy-malware
🛍️ Products
- Added "OWASP Juice Shop Card (non-foil)" to product inventory
🐛 Bugfixes
- #1628: Fixed server crashes when accessing data export or order history endpoints without an authorization token
🗺️ I18N
- Extended 🇹🇭 and 🇩🇰 translations significantly