django-DefectDojo icon indicating copy to clipboard operation
django-DefectDojo copied to clipboard

CVSS vector is not populated when finding is created from a template

Open devsecopsale opened this issue 1 year ago • 1 comments

Slack us first! The easiest and fastest way to help you is via Slack. There's a free and easy signup to join our #defectdojo channel in the OWASP Slack workspace: Get Access. If you're confident you've found a bug, or are allergic to Slack, you can submit an issue anyway.

Be informative When a finding is created from a finding template, cvss vector field is not kept in the newly created finding.

Bug description cvss vector is saved in the finding template but not populated to the new finding created from it.

Steps to reproduce Steps to reproduce the behavior:

  1. Create a new finding from a template
  2. Check the CVSS vector field

Expected behavior CVSS vector field should be saved as part of all other fields of the new finding.

Deployment method (select with an X)

  • [x ] Docker Compose
  • [ ] Kubernetes
  • [ ] GoDojo

Environment information

  • Operating System: NA (Docker)
  • DefectDojo version (see footer) 2.33.1

Logs Use docker-compose logs (or similar, depending on your deployment method) to get the logs and add the relevant sections here showing the error occurring (if applicable).

Sample scan files If applicable, add sample scan files to help reproduce your problem.

Screenshots If applicable, add screenshots to help explain your problem.

Additional context (optional) Add any other context about the problem here.

devsecopsale avatar May 08 '24 17:05 devsecopsale

this may be fixed by just adding the cvss field here: https://github.com/DefectDojo/django-DefectDojo/blob/dev/dojo/finding/views.py#L1897

devsecopsale avatar May 08 '24 17:05 devsecopsale