CervantesSec/cervantes

Invalid data mapping in Scriban variable {{VulnJira}}

Closed this issue · 3 comments

jstangle commented

{{VulnJira}} is displaying the CVSS vector instead of the Jira key for the vulnerability.

Steps to reproduce:

  • Create a Report Component containing the following string:
    {{tablerow vuln in Vulns}}{{if vuln.VulnJiraCreated; vuln.VulnJira; end}}{{end}}
  • Attach the Component to a Report template
  • Create a Report using the aforementioned Report template
  • Check the output in the Report

image
image

mesquidar commented

Hi @jstangle thanks for reporting this issue I will take it a look and I will let you know :)

Thank you
Best regards

mesquidar commented

Hi @jstangle I found the issue and I think is fixed and I also added new variables ready to use:

  • {{VulnJira}}
  • {{VulnJiraStatus}}
  • {{VulnJiraDueDate}}
  • {{VulnJiraCreatedDate}}
  • {{VulnJiraResolutionDate}}
  • {{VulnJiraResolution}}
  • {{VulnJiraPriority}}
  • {{VulnJiraAssigned}}
  • {{VulnJiraType}}
  • {{VulnJiraComponent}}
  • {{VulnJiraComponent}}

I created a dev image if you want to test it before to commit the changes :)

git clone https://github.com/CervantesSec/docker.git
  • After that you need to start your docker containers:
docker-compose -p cervantes -f docker-compose-dev.yml up -d

Thank you :)
Best regards

jstangle commented

Hi @mesquidar, thank you! I can confirm it is working.