ICSA-23-075-06: Invalid URIs

[tschmidtb51]

🐛 Summary

ICSA-23-075-06 contains in /vulnerabilities[]/remediations[4]/url and /vulnerabilities[]/remediations[8]/url the string http://process.honeywell.com%20/. If I'm not completely wrong, this is not a valid URL (as it contains the %20 as part of the domain name).

To reproduce

Steps to reproduce the behavior:

1. Get the ICSA-23-075-06](https://raw.githubusercontent.com/cisagov/CSAF/50a6a8aa45d766db17d9c84763b00902a8ae219e/csaf_files/OT/white/2023/icsa-23-075-06.json).
2. Use the csaf-validator to check the file.

Expected behavior

The file should conform the schema.

Any helpful log output or screenshots

Paste the results here:

$ csaf_validator csaf_files/OT/white/2023/icsa-23-075-06.json
schema validation errors of "csaf_files/OT/white/2023/icsa-23-075-06.json"
  * https://docs.oasis-open.org/csaf/csaf/v2.0/csaf_json_schema.json#: doesn't validate with https://docs.oasis-open.org/csaf/csaf/v2.0/csaf_json_schema.json#
  * /vulnerabilities/0/remediations/4/url: 'http://process.honeywell.com%20/' is not valid 'uri'
  * /vulnerabilities/0/remediations/8/url: 'http://process.honeywell.com%20/' is not valid 'uri'
  * /vulnerabilities/1/remediations/4/url: 'http://process.honeywell.com%20/' is not valid 'uri'
  * /vulnerabilities/1/remediations/8/url: 'http://process.honeywell.com%20/' is not valid 'uri'
  * /vulnerabilities/2/remediations/4/url: 'http://process.honeywell.com%20/' is not valid 'uri'
  * /vulnerabilities/2/remediations/8/url: 'http://process.honeywell.com%20/' is not valid 'uri'

[mstrad]

Resolved as of commit ee9bde3

Thank you for sharing this issue with us.

[tschmidtb51]

Unfortunately, the change missed to update the version and add a revision_history element.