{% extends "base.html" %} {% load display_tags %} {% load multiply %} {% load authorization_tags %} {% load humanize %} {% load static %} {% load i18n %} {% load get_endpoint_status %} {% block add_styles %} {{ block.super }} .tooltip-inner { max-width: 650px; } {% endblock %} {% block add_css_before %} {{ block.super }} {% endblock %} {% block content %} {{ block.super }} {% user_can_clear_peer_review finding dojo_user as clear_peer_review %}
Alert: This Finding is under review and may not be 100% accurate. {% if finding|has_object_permission:"Finding_Edit" and clear_peer_review %} [Clear Review] {% endif %} | ||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Alert: Please review this finding to verify if the defect is remediated. [Review Finding for Closure] | ||||||||||||||||||||||||
ID | Severity | {% if system_settings.enable_finding_sla %}SLA | {% endif %} {% if finding.scanner_confidence %}Scanner Confidence | {% endif %}Status | {% if finding.risk_acceptance_set.all %}Risk Acceptance | {% endif %} {% if finding.duplicate_finding %}Original | {% endif %} {% if duplicate_cluster and not finding.duplicate %}Duplicates | {% elif duplicate_cluster and finding.duplicate %}Duplicate Cluster | {% endif %}Type | Date discovered | Age | {% if finding.publish_date %}Vuln Publish date | {% endif %} {% if finding.planned_remediation_date %}Planned Remediation | {% endif%} {% if finding.planned_remediation_version %}{% trans "Planned Remediation version" %} | {% endif %}Reporter | {% if finding.mitigated %}Date Mitigated | Mitigated By | {% endif %}CWE | Vulnerability Id | {% if finding.epss_score != None or finding.epss_percentile != None %} {% if finding.epss_score != None and finding.epss_percentile != None %}EPSS Score / Percentile | {% elif finding.epss_score != None and finding.epss_percentile == None %}EPSS Score | {% elif finding.epss_score == None and finding.epss_percentile != None %}EPSS Percentile | {% endif %} {% endif %}Found by | {% if finding.vuln_id_from_tool %}Vuln ID from tool | {% endif %} {% endblock header_head %}
{{ finding.id }} | {% if finding.severity %} {% if finding.cvssv3 %} {% endif %} {{ finding.severity_display }} {% if finding.cvssv3_score %} ({{ finding.cvssv3_score }}) {% endif %} {% if finding.cvssv3 %} {% endif %} {% else %} Unknown {% endif %} | {% if system_settings.enable_finding_sla %}{{ finding|finding_sla }} | {% endif %} {% if finding.scanner_confidence %}{{finding.get_scanner_confidence_text}} | {% endif %}{% comment %} {% if finding.duplicate %} {% include "dojo/finding_related_actions.html" with similar_finding=finding finding_context=finding intro=finding|finding_display_status|safe %} {% else %} {{ finding|finding_display_status|safe }} {% endif %} {% endcomment %} {{ finding|finding_display_status|safe }} {{ finding|import_history }} | {% if finding.risk_acceptance_set.all %}{% for ra in finding.risk_acceptance_set.all|slice:":5" %} {% endfor %} | {% endif %} {% if finding.duplicate_finding %}{% endif %} {% if duplicate_cluster %} |
{% for duplicate in duplicate_cluster|slice:"5" %}
{% endfor %}
{% if duplicate_cluster|length > 5 %}
...
{% endif %}
|
{% endif %}
{% if finding.static_finding and finding.dynamic_finding > 0 %} Static/Dynamic {% elif finding.static_finding > 0 %} Static {% else %} Dynamic {% endif %} | {{ finding.date }} | {{ finding.age }} days | {% if finding.publish_date %}{{ finding.publish_date }} | {% endif %} {% if finding.planned_remediation_date %}{{ finding.planned_remediation_date }} | {% endif %} {% if finding.planned_remediation_version %}{{ finding.planned_remediation_version }} | {% endif %}{{ finding.reporter }} | {% if finding.mitigated %}{{ finding.mitigated }} | {{ finding.mitigated_by }} | {% endif %}{% if finding.cwe > 0 %} {{ finding.cwe }} {% endif %} | {% with finding|first_vulnerability_id as first_vulnerability_id %} {% if first_vulnerability_id %} {% if first_vulnerability_id|has_vulnerability_url %} {{ first_vulnerability_id }} {% else %} {{ first_vulnerability_id }} {% endif %} {% endif %} | {% if finding.epss_score != None or finding.epss_percentile != None %} {% if finding.epss_score != None and finding.epss_percentile != None %}{{ finding.epss_score|multiply:100|floatformat:"2" }}% / {{ finding.epss_percentile|multiply:100|floatformat:"2" }}% | {% elif finding.epss_score != None and finding.epss_percentile == None %}{{ finding.epss_score|multiply:100|floatformat:"2" }}% | {% elif finding.epss_score == None and finding.epss_percentile != None %}{{ finding.epss_percentile|multiply:100|floatformat:"2" }}% | {% endif %} {% endif %}{% if found_by %} {% for scanner in found_by %} {{ scanner }} {% endfor %} {% else %} {{ finding.test.test_type }} {% endif %} | {% endwith %} {% if finding.vuln_id_from_tool %}{{ finding.vuln_id_from_tool }} | {% endif %} {% endblock header_body %}
Additional Vulnerability Ids |
---|
{% for vulnerability_id in additional_vulnerability_ids %} {% if vulnerability_id|has_vulnerability_url%} {{ vulnerability_id }} {% else %} {{ vulnerability_id }} {% endif %} {% if not forloop.last %}, {% endif %} {% endfor %} |
Source Filepath | Source Line Number | Source Object |
---|---|---|
{{ finding.get_sast_source_file_path_with_link|safe }} | {{ finding.sast_source_line }} | {{ finding.sast_source_object }} |
Sink Filepath | Sink Line Number | Sink Object |
---|---|---|
{{ finding.get_file_path_with_link|safe }} | {{ finding.line }} | {{ finding.sast_sink_object }} |
Service | {% endif %} {% if finding.file_path %}Location | {% endif %} {% if finding.line %}Line Number | {% endif %} {% if finding.nb_occurences > 1 %}Nb occurences | {% endif %} {% if finding.component_name %}Component Name | {% endif %} {% if finding.component_version %}Component Version | {% endif %} {% if finding.has_jira_configured or finding.jira_issue %}JIRA | JIRA Change | {% endif %} {% if finding.github_conf_new or finding.github_issue %}GitHub | {% endif %} {% if 'is_finding_groups_enabled'|system_setting_enabled and finding.finding_group %}Group | {% endif %} {% if finding.effort_for_fixing %}{% trans "Effort for fixing" %} | {% endif %}
---|---|---|---|---|---|---|---|---|---|---|
{{ finding.service }} | {% endif %} {% if finding.file_path %}{{ finding.get_file_path_with_link|safe }} | {% endif %} {% if finding.line %}{{ finding.line }} | {% endif %} {% if finding.nb_occurences > 1 %}{{ finding.nb_occurences }} | {% endif %} {% if finding.component_name %}{{ finding.component_name }} | {% endif %} {% if finding.component_version %}{{ finding.component_version }} | {% endif %} {% if finding.has_jira_configured or finding.has_jira_issue or finding.has_jira_group_issue %}{% if finding.has_jira_group_issue %} {{ finding.finding_group | jira_key }} {% endif %} {% if finding.has_jira_issue %} {{ finding | jira_key }} {% else %} {% if can_be_pushed_to_jira %} {% if not finding.has_jira_group_issue %} None {% comment %} {% endcomment %} {% endif %} {% else %} {% endif %} {% endif %} |
{% if finding.has_jira_group_issue %}
{{ finding.finding_group.jira_issue.jira_change|naturalday }}
{% elif finding.jira_issue %}
{{ finding.jira_issue.jira_change|naturalday }}
{% endif %}
|
{% endif %}
{% if finding.github_conf_new or finding.github_issue %}
{% if finding.github_issue %} #{{ finding.github_issue.issue_id }} {% endif %} | {% endif %} {% if 'is_finding_groups_enabled'|system_setting_enabled and finding.finding_group %}{{ finding.finding_group.name }} | {% endif %} {% if finding.effort_for_fixing %}{{ finding.effort_for_fixing }} | {% endif %}
Injected Parameter(s) | {% if finding.payload %}Payload | {% endif %}
---|---|
{{ finding.param|default_if_none:"" }} | {% if finding.payload %}{{ finding.payload|default_if_none:"" }} | {% endif %}
{% trans "Action" %} | {% trans "Date/Time" %} | {% trans "Import Type" %} | {% trans "Branch/Tag" %} | {% trans "Build ID" %} | {% trans "Commit" %} | {% trans "Version" %} | {% trans "Endpoint" %} |
---|---|---|---|---|---|---|---|
{{ test_import_finding_action.get_action_display }} | {{ test_import_finding_action.test_import.created|date:"DATETIME_FORMAT" }} {{ test_import_finding_action.test_import|import_settings_tag }} | {{ test_import_finding_action.test_import.type }} | {{ test_import_finding_action.test_import.branch_tag|default_if_none:"" }} | {{ test_import_finding_action.test_import.build_id|default_if_none:"" }} | {{ test_import_finding_action.test_import.commit_hash|default_if_none:"" }} | {{ test_import_finding_action.test_import.version|default_if_none:"" }} | {{ test_import_finding_action.test_import.import_settings.endpoint|default_if_none:"" }} |
{% trans "No import history found." %}
Name | Username | Role | Environment | Authentication Provider | Login Valid | Actions |
---|---|---|---|---|---|---|
Credential Configured for this Finding
{% if not cred_finding %}
|
||||||
{{ cred.cred_id.name }} | {{ cred.cred_id.username }} | {{ cred.cred_id.role }} | {{ cred.cred_id.environment }} | {{ cred.is_authn_provider }} | {{ cred.cred_id.is_valid }} | |
Credentials Inherited from Test: {{ finding.test }} | ||||||
{{ cred.cred_id.name }} | {{ cred.cred_id.username }} | {{ cred.cred_id.role }} | {{ cred.cred_id.environment }} | {{ cred.is_authn_provider }} | {{ cred.cred_id.is_valid }} |
No credentials configured. {% if not cred_engagement %} Configure engagement credentials first, then add a credential to the test or finding. {% endif %}