DependencyTrack / dependency-track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
https://dependencytrack.org/
Apache License 2.0
2.71k stars 580 forks source link

URL encoding issue for Vulnerability IDs #4391

Open KS-DR opened 6 days ago

KS-DR commented 6 days ago

Current Behavior

If one creates a vulnerability and uses special characters like "/" or "?" in the Vulnerability ID (e.g. TEST/ID), the vulnerability can't be reached afterwards, because the special characters are not properly encoded in the URL.

Steps to Reproduce

  1. Go to {Your-DT-URL}/vulnerabilities
  2. Click on "+ Create Vulnerability"
  3. As Vulnerability ID insert "TEST/0815-Vuln"
  4. Fill out the remaining form and click "Create"
  5. Get 404-Error

Expected Behavior

Vulnerability IDs should be encoded correctly, so that vulnerabilities can be reached after creation, even if special characters like / exist in the ID.

Dependency-Track Version

4.12.1

Dependency-Track Distribution

Container Image

Database Server

PostgreSQL

Database Server Version

14.7

Browser

Microsoft Edge

Checklist