aliasrobotics / RVD

Robot Vulnerability Database. An archive of robot vulnerabilities and bugs.
https://aliasrobotics.com
GNU General Public License v3.0
171 stars 31 forks source link

RVD#1323: compile, ...r_py/test/xml_matching.py:6 #1323

Closed rvd-bot closed 3 years ago

rvd-bot commented 4 years ago
{
    "id": 1323,
    "title": "RVD#1323: compile, ...r_py/test/xml_matching.py:6",
    "type": "bug",
    "description": "Argument 1 to this function call should be checked to ensure that it does\n    not come from an untrusted source without first verifying that it contains\n    nothing dangerous. @ /opt/ros2_moveit2_ws/src/urdf_parser_py/test/xml_matching.py:6",
    "cwe": "None",
    "cve": "None",
    "keywords": [
        "rats",
        "static analysis",
        "testing",
        "triage",
        "bug"
    ],
    "system": "",
    "vendor": null,
    "severity": {
        "rvss-score": 0,
        "rvss-vector": "",
        "severity-description": "",
        "cvss-score": 0,
        "cvss-vector": ""
    },
    "links": [
        "https://github.com/aliasrobotics/RVD/issues/1323"
    ],
    "flaw": {
        "phase": "testing",
        "specificity": "subject-specific",
        "architectural-location": "application-specific",
        "application": "N/A",
        "subsystem": "N/A",
        "package": "N/A",
        "languages": "None",
        "date-detected": "2020-02-28 (13:42)",
        "detected-by": "Alias Robotics",
        "detected-by-method": "testing static",
        "date-reported": "2020-02-28 (13:42)",
        "reported-by": "Alias Robotics",
        "reported-by-relationship": "automatic",
        "issue": "https://github.com/aliasrobotics/RVD/issues/1323",
        "reproducibility": "always",
        "trace": "",
        "reproduction": "See artifacts below (if available)",
        "reproduction-image": "gitlab.com/aliasrobotics/offensive/alurity/pipelines/active/pipeline_ros2_ros_industrial/-/jobs/453892004/artifacts/download"
    },
    "exploitation": {
        "description": "",
        "exploitation-image": "",
        "exploitation-vector": ""
    },
    "mitigation": {
        "description": "",
        "pull-request": "",
        "date-mitigation": ""
    }
}
rvd-bot commented 3 years ago

Ticket is still missing triage. Closing for inactivity