-
Notifications
You must be signed in to change notification settings - Fork 106
json formatting and parsing error fix #380
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
| "references": [ | ||
| "https://documentation-service.arm.com/static/624af896b059dc5ff9a8fbda" | ||
| ] | ||
| } |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
JSON Parser was throwing error here.
| "https://www.ubiqsecurity.com/bouncy-castle-and-the-impact-of-cryptographic-vulnerabilities/", | ||
| "https://blog.cryptographyengineering.com/2013/09/20/rsa-warns-developers-against-its-own/" | ||
| ] | ||
| } |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
same here
|
@TimmyBugcrowd - both changes here are minor and appear to remove an extra square brace which was breaking the tests. Appears to be safe to merge. |
* Updating the SSRF category * Revert "Updating the SSRF category" This reverts commit 785bd8b. * Update SSRF classification from `Broken Access Control` to `Server Security Misconfiguration` * Update SSRF mappings in CVSS V3, CWE, and Remediation Advice files * Refactor SSRF category and split `External` variant into `GET Request Only` and `DNS Query Only` * Update CVSS V3 mapping to include the updated mappings for the `External` SSRF variant * PII-leakage-update FROM: P1 - Automotive Security Misconfiguration - Infotainment, Radio Head Unit - PII Leakage TO: P1 - Automotive Security Misconfiguration - Infotainment, Radio Head Unit - Sensitive data Leakage/Exposure Varies - Sensitive Data Exposure - Disclosure of Secrets - PII Leakage/Exposure * Update secure-code-warrior-links.json * Update remediation_advice.json * Update remediation_advice.json * Update cwe.json * Update cwe.json * Update cwe.json * Update cwe.json * Update cwe.json * Update cwe.json * Update cwe.json * Update remediation_advice.json * HTTP Request Smuggling Adding HTTP Request Smuggling as a new VRT entry. * Update remediation_advice.json * Update cvss_v3.json * Failure to invalidate session on permission change Adding Failure to invalidate session on permission change as a new VRT entry. * Update cwe.json * Update cwe.json * Update remediation_advice.json * Update cwe.json * Deprecation of XSS on IE11 REMOVE: P4 - Cross-Site Scripting (XSS) - IE-Only - IE11 FROM: P5 - Cross-Site Scripting (XSS) - IE-Only - Older Version (< IE11) TO: P5 - Cross-Site Scripting (XSS) - IE-Only * Update remediation_advice.json * LDAP Injection Adding LDAP Injection as a new VRT entry. * Update cwe.json * Update remediation_advice.json * Update cvss_v3.json * HTML-Injection Adding the category below to VRT: P5 - Server-Side Injection - Content Spoofing - HTML Content Injection * SSRF External Low Impact * new IDOR variants new IDOR variants * LDAP Injection (#367) * Update vulnerability-rating-taxonomy.json * Update cvss_v3.json * Update cvss_v3.json * New Changes LDAP Injection * Cryptographic Weakness Category #352 * New changes Cryptographic Weakness category * json parse error fix (#380) * hyphens to underscores in vrt items * Update remediation_advice.json * Update remediation_advice.json --------- Co-authored-by: Amal Murali <[email protected]> Co-authored-by: Deepak Kumar Jha <[email protected]>
Issue: Resolves
CVSS v3 Mapping:
CWE Mapping:
Remediation Advice Mapping: