Skip to content

Conversation

jhas3c
Copy link
Contributor

@jhas3c jhas3c commented Nov 1, 2023

"references": [
"https://documentation-service.arm.com/static/624af896b059dc5ff9a8fbda"
]
}
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

JSON Parser was throwing error here.

"https://www.ubiqsecurity.com/bouncy-castle-and-the-impact-of-cryptographic-vulnerabilities/",
"https://blog.cryptographyengineering.com/2013/09/20/rsa-warns-developers-against-its-own/"
]
}
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

same here

@vortexau
Copy link

vortexau commented Nov 9, 2023

@TimmyBugcrowd - both changes here are minor and appear to remove an extra square brace which was breaking the tests. Appears to be safe to merge.

@TimmyBugcrowd TimmyBugcrowd merged commit f5526b4 into bugcrowd:1.20-stable Nov 10, 2023
nnons pushed a commit that referenced this pull request Nov 13, 2023
* Updating the SSRF category

* Revert "Updating the SSRF category"

This reverts commit 785bd8b.

* Update SSRF classification from `Broken Access Control` to `Server Security Misconfiguration`

* Update SSRF mappings in CVSS V3, CWE, and Remediation Advice files

* Refactor SSRF category and split `External` variant into `GET Request Only` and `DNS Query Only`

* Update CVSS V3 mapping to include the updated mappings for the `External` SSRF variant

* PII-leakage-update

FROM:
P1 - Automotive Security Misconfiguration - Infotainment, Radio Head Unit - PII Leakage

TO:
P1 - Automotive Security Misconfiguration - Infotainment, Radio Head Unit - Sensitive data Leakage/Exposure
Varies - Sensitive Data Exposure - Disclosure of Secrets - PII Leakage/Exposure

* Update secure-code-warrior-links.json

* Update remediation_advice.json

* Update remediation_advice.json

* Update cwe.json

* Update cwe.json

* Update cwe.json

* Update cwe.json

* Update cwe.json

* Update cwe.json

* Update cwe.json

* Update remediation_advice.json

* HTTP Request Smuggling

Adding HTTP Request Smuggling as a new VRT entry.

* Update remediation_advice.json

* Update cvss_v3.json

* Failure to invalidate session on permission change

Adding Failure to invalidate session on permission change as a new VRT entry.

* Update cwe.json

* Update cwe.json

* Update remediation_advice.json

* Update cwe.json

* Deprecation of XSS on IE11

REMOVE: P4 - Cross-Site Scripting (XSS) - IE-Only - IE11

FROM: P5 - Cross-Site Scripting (XSS) - IE-Only - Older Version (< IE11)

TO: P5 - Cross-Site Scripting (XSS) - IE-Only

* Update remediation_advice.json

* LDAP Injection

Adding LDAP Injection as a new VRT entry.

* Update cwe.json

* Update remediation_advice.json

* Update cvss_v3.json

* HTML-Injection

Adding the category below to VRT:
P5 - Server-Side Injection - Content Spoofing - HTML Content Injection

* SSRF External Low Impact

* new IDOR variants

new IDOR variants

* LDAP Injection (#367)

* Update vulnerability-rating-taxonomy.json

* Update cvss_v3.json

* Update cvss_v3.json

* New Changes LDAP Injection

* Cryptographic Weakness Category #352

* New changes Cryptographic Weakness category

* json parse error fix (#380)

* hyphens to underscores in vrt items

* Update remediation_advice.json

* Update remediation_advice.json

---------

Co-authored-by: Amal Murali <[email protected]>
Co-authored-by: Deepak Kumar Jha <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants