forked from DefectDojo/django-DefectDojo
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request DefectDojo#10356 from DefectDojo/master-into-dev/2…
….35.1-2.36.0-dev Release: Merge back 2.35.1 into dev from: master-into-dev/2.35.1-2.36.0-dev
- Loading branch information
Showing
10 changed files
with
212 additions
and
20 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,173 @@ | ||
| { | ||
| "Generated": "03/02/2019 15:50:29 (UTC-06:00)", | ||
| "Target": { | ||
| "ScanId": "fg49hk5", | ||
| "Url": "https://www.sampleweb.org/", | ||
| "Initiated": "03/02/2019 15:48:23 (UTC-06:00)", | ||
| "Duration": "00:01:20.4322725" | ||
| }, | ||
| "Vulnerabilities": [ | ||
| { | ||
| "Url": "https://www.sampleweb.org/", | ||
| "Type": "CookieNotMarkedAsSecure", | ||
| "Name": "Cookie Not Marked as Secure", | ||
| "Severity": "High", | ||
| "Certainty": 100, | ||
| "Confirmed": true, | ||
| "Classification": { | ||
| "Owasp": "A6", | ||
| "Owasp2017": "A3", | ||
| "Wasc": "15", | ||
| "Cwe": "614", | ||
| "Capec": "102", | ||
| "Pci31": "6.5.10", | ||
| "Pci32": "6.5.10", | ||
| "Hipaa": null | ||
| }, | ||
| "HttpRequest": { | ||
| "Method": "GET", | ||
| "Content": "GET / HTTP/1.1\r\nHost: www.sampleweb.org\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8\r\nAccept-Encoding: gzip, deflate\r\nAccept-Language: en-us,en;q=0.5\r\nCache-Control: no-cache\r\nUser-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)\r\nX-Scanner: Netsparker\r\n\r\n", | ||
| "Parameters": [ ] | ||
| }, | ||
| "HttpResponse": { | ||
| "StatusCode": 200, | ||
| "Duration": 644.6389, | ||
| "Content": "HTTP/1.1 200 OK\r\nX-Cache: MISS\r\nX-Timer: S1551563304.277046,VS0,VE20\r\nAge: 0\r\nCache-Control: max-age=600\r\nETag: W/\"5b8fd2e9-6807\"\r\nAccess-Control-Allow-Origin: *\r\nX-Fastly-Request-ID: 0345654a04250c6d1c420d386643c1f6dc7c3c24\r\nX-Served-By: cache-chi21166-CHI\r\nConnection: keep-alive\r\nExpires: Sat, 02 Mar 2019 21:58:24 GMT\r\nAccept-Ranges: bytes\r\nX-Cache-Hits: 0\r\nContent-Length: 5954\r\nX-GitHub-Request-Id: 0820:594C:6A9400:84F805:5C7AFA26\r\nVary: Accept-Encoding\r\nVia: 1.1 varnish\r\nLast-Modified: Wed, 05 Sep 2018 12:58:17 GMT\r\nContent-Type: text/html; charset=utf-8\r\nServer: GitHub.com\r\nDate: Sat, 02 Mar 2019 21:48:24 GMT\r\nContent-Encoding: \r\n\r\n" | ||
| }, | ||
| "ExtraInformation": [ | ||
| { | ||
| "Name": "Identified Cookie(s)", | ||
| "Value": "cookieconsent_status" | ||
| }, | ||
| { | ||
| "Name": "Cookie Source", | ||
| "Value": "JavaScript" | ||
| } | ||
| ], | ||
| "KnownVulnerabilities": [ ], | ||
| "Description": "<p>Netsparker identified a cookie not marked as secure, and transmitted over HTTPS.</p><p>This means the cookie could potentially be stolen by an attacker who can successfully intercept and decrypt the traffic, or following a successful man-in-the-middle attack.</p>", | ||
| "Impact": "<div>This cookie will be transmitted over a HTTP connection, therefore if this cookie is important (<em>such as a session cookie</em>), an attacker might intercept it and hijack a victim's session. If the attacker can carry out a man-in-the-middle attack, he/she can force the victim to make an HTTP request to steal the cookie.</div>", | ||
| "RemedialActions": "<div><ol><li>See the remedy for solution.</li><li>Mark all cookies used within the application as secure. <em>(If the cookie is not related to authentication or does not carry any personal information, you do not have to mark it as secure.)</em></li></ol></div>", | ||
| "ExploitationSkills": "<div>To exploit this issue, the attacker needs to be able to intercept traffic. This generally requires local access to the web server or to the victim's network. Attackers need to be understand layer 2, have physical access to systems either as waypoints for the traffic, or have locally gained access to to a system between the victim and the web server.</div>", | ||
| "RemedialProcedure": "<div>Mark all cookies used within the application as secure.</div>", | ||
| "RemedyReferences": "", | ||
| "ExternalReferences": "<div><ul><li><a href='https://msdn.microsoft.com/en-us/library/system.net.cookie.secure.aspx'>.NET Cookie.Secure Property</a></li><li><a href='http://blog.teamtreehouse.com/how-to-create-totally-secure-cookies'>How to Create Totally Secure Cookies</a></li></ul></div>", | ||
| "ProofOfConcept": "" | ||
| }, | ||
| { | ||
| "Url": "https://www.sampleweb.org/", | ||
| "Type": "BootstrapjsOutOfDate", | ||
| "Name": "Out-of-date Version (Bootstrap)", | ||
| "Severity": "Medium", | ||
| "Certainty": 90, | ||
| "Confirmed": false, | ||
| "Classification": { | ||
| "Owasp": "A9", | ||
| "Owasp2017": "A9", | ||
| "Wasc": null, | ||
| "Cwe": null, | ||
| "Capec": "310", | ||
| "Pci31": "6.2", | ||
| "Pci32": "6.2", | ||
| "Hipaa": null | ||
| }, | ||
| "HttpRequest": { | ||
| "Method": "GET", | ||
| "Content": "GET / HTTP/1.1\r\nHost: www.sampleweb.org\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8\r\nAccept-Encoding: gzip, deflate\r\nAccept-Language: en-us,en;q=0.5\r\nCache-Control: no-cache\r\nUser-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)\r\nX-Scanner: Netsparker\r\n\r\n", | ||
| "Parameters": [ ] | ||
| }, | ||
| "HttpResponse": { | ||
| "StatusCode": 200, | ||
| "Duration": 644.6389, | ||
| "Content": "HTTP/1.1 200 OK\r\nX-Cache: MISS\r\nX-Timer: S1551563304.277046,VS0,VE20\r\nAge: 0\r\nCache-Control: max-age=600\r\nETag: W/\"5b8fd2e9-6807\"\r\nAccess-Control-Allow-Origin: *\r\nX-Fastly-Request-ID: 0345654a04250c6d1c420d386643c1f6dc7c3c24\r\nX-Served-By: cache-chi21166-CHI\r\nConnection: keep-alive\r\nExpires: Sat, 02 Mar 2019 21:58:24 GMT\r\nAccept-Ranges: bytes\r\nX-Cache-Hits: 0\r\nContent-Length: 5954\r\nX-GitHub-Request-Id: 0820:594C:6A9400:84F805:5C7AFA26\r\nVary: Accept-Encoding\r\nVia: 1.1 varnish\r\nLast-Modified: Wed, 05 Sep 2018 12:58:17 GMT\r\nContent-Type: text/html; charset=utf-8\r\nServer: GitHub.com\r\nDate: Sat, 02 Mar 2019 21:48:24 GMT\r\nContent-Encoding: \r\n\r\n" | ||
| }, | ||
| "ExtraInformation": [ | ||
| { | ||
| "Name": "Identified Version", | ||
| "Value": "4.0.0" | ||
| }, | ||
| { | ||
| "Name": "Latest Version", | ||
| "Value": "4.3.1" | ||
| }, | ||
| { | ||
| "Name": "Vulnerability Database", | ||
| "Value": "Result is based on 3/1/2019 vulnerability database content." | ||
| } | ||
| ], | ||
| "KnownVulnerabilities": [ | ||
| { | ||
| "Title": "bootstrap.js Cross-Site Scripting (XSS) Vulnerability", | ||
| "Severity": "Medium" | ||
| }, | ||
| { | ||
| "Title": "bootstrap.js Cross-Site Scripting (XSS) Vulnerability", | ||
| "Severity": "Medium" | ||
| }, | ||
| { | ||
| "Title": "bootstrap.js Cross-Site Scripting (XSS) Vulnerability", | ||
| "Severity": "Medium" | ||
| }, | ||
| { | ||
| "Title": "bootstrap.js Cross-Site Scripting (XSS) Vulnerability", | ||
| "Severity": "Medium" | ||
| } | ||
| ], | ||
| "Description": "<p>Netsparker identified that the target web site is using Bootstrap and detected that it is out of date.</p>", | ||
| "Impact": "<div>Since this is an old version of the software, it may be vulnerable to attacks.</div>", | ||
| "RemedialActions": "", | ||
| "ExploitationSkills": "", | ||
| "RemedialProcedure": "<div>\n<p>Please upgrade your installation of Bootstrap to the latest stable version.</p>\n</div>", | ||
| "RemedyReferences": "<div><ul><li><a href='https://getbootstrap.com/'>Downloading Bootstrap</a></li></ul></div>", | ||
| "ExternalReferences": "", | ||
| "ProofOfConcept": "" | ||
| }, | ||
| { | ||
| "Url": "https://www.sampleweb.org/", | ||
| "Type": "CookieNotMarkedAsHttpOnly", | ||
| "Name": "Cookie Not Marked as HttpOnly", | ||
| "Severity": "Low", | ||
| "Certainty": 100, | ||
| "Confirmed": true, | ||
| "Classification": { | ||
| "Owasp": "A5", | ||
| "Owasp2017": "A6", | ||
| "Wasc": "15", | ||
| "Cwe": "16", | ||
| "Capec": "107", | ||
| "Pci31": null, | ||
| "Pci32": null, | ||
| "Hipaa": null | ||
| }, | ||
| "HttpRequest": { | ||
| "Method": "GET", | ||
| "Content": "GET / HTTP/1.1\r\nHost: www.sampleweb.org\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8\r\nAccept-Encoding: gzip, deflate\r\nAccept-Language: en-us,en;q=0.5\r\nCache-Control: no-cache\r\nUser-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)\r\nX-Scanner: Netsparker\r\n\r\n", | ||
| "Parameters": [ ] | ||
| }, | ||
| "HttpResponse": { | ||
| "StatusCode": 200, | ||
| "Duration": 644.6389, | ||
| "Content": null | ||
| }, | ||
| "ExtraInformation": [ | ||
| { | ||
| "Name": "Identified Cookie(s)", | ||
| "Value": "cookieconsent_status" | ||
| }, | ||
| { | ||
| "Name": "Cookie Source", | ||
| "Value": "JavaScript" | ||
| } | ||
| ], | ||
| "KnownVulnerabilities": [ ], | ||
| "Description": "<p>Netsparker identified a cookie not marked as HTTPOnly.</p><p>HTTPOnly cookies cannot be read by client-side scripts, therefore marking a cookie as HTTPOnly can provide an additional layer of protection against cross-site scripting attacks.</p>", | ||
| "Impact": "<div>During a cross-site scripting attack, an attacker might easily access cookies and hijack the victim's session.</div>", | ||
| "RemedialActions": "<div><ol><li>See the remedy for solution.</li><li>Consider marking all of the cookies used by the application as HTTPOnly. (<em>After these changes javascript code will not be able to read cookies.</em>)</li></ol></div>", | ||
| "ExploitationSkills": "", | ||
| "RemedialProcedure": "<div>Mark the cookie as HTTPOnly. This will be an extra layer of defense against XSS. However this is not a silver bullet and will not protect the system against cross-site scripting attacks. An attacker can use a tool such as <a href=\"https://labs.portcullis.co.uk/tools/xss-tunnel/\" data-mce-href=\"https://labs.portcullis.co.uk/tools/xss-tunnel/\">XSS Tunnel</a> to bypass HTTPOnly protection.</div>", | ||
| "RemedyReferences": "", | ||
| "ExternalReferences": "<div><ul><li><a href='https://www.owasp.org/index.php/HTTPOnly'>OWASP HTTPOnly Cookies</a></li><li><a href='https://msdn.microsoft.com/en-us/library/system.web.httpcookie.httponly%28VS.80%29.aspx'>MSDN - ASP.NET HTTPOnly Cookies</a></li></ul></div>", | ||
| "ProofOfConcept": "" | ||
| } | ||
| ] | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters