VRT-release-changes

[TimmyBugcrowd]

Added

Server Security Misconfiguration - Email verification bypass - P5
Server Security Misconfiguration - Missing Subresource Integrity (SRI) - P5
Sensitive Data Exposure - Token Leakage via Referer - Password Reset Token - P5
Server Security Misconfiguration - Software Package Takeover - Varies
Broken Access Control (BAC) - Privilege Escalation - Varies

Removed

Broken Authentication and Session Management - Privilege Escalation - Varies

[AN2424]

We need to look into this file:
secure-code-warrior-links.json

[abhinav-nain]

We need to look into this file: secure-code-warrior-links.json

For secure-code-warrior-links.json:

1. Please run command python3 lib/generate_artifacts.py or python lib/generate_artifacts.py whatever runs fine in your system, while being in the root of the repository.
2. This will generate a scw_links.json, copy paste the content of that file to third-party-mappings/remediation_training/secure-code-warrior-links.json.

Ensure that it includes the newly added items and excludes the removed items

Also, add removed items in deprecated-node-mapping.json

In case you want me to push this I can do it from my end.

[abhinav-nain]

These looks good