infobyte / faraday

Open Source Vulnerability Management Platform
https://www.faradaysec.com
GNU General Public License v3.0
4.78k stars 885 forks source link

Description of imported vulnerabilities from Burp was not replaced with description from template #429

Open neumrli opened 3 years ago

neumrli commented 3 years ago

Issue Type

Faraday version

Faraday 3.14.2

Component Name

WebGui

Steps to reproduce

After importing XML with vulnerabilities from Burp, I'm unable to replace all of them with vulnerability description from Faraday template. Each time I've tried to import Burp XML report in new workspace, non-replaced XSS vulnerabilities were different, so the problem is random.

Step 1: Vulnerabilities are imported

step1

Step 2: All vulnerabilities were selected and vulnerability template to be replaced with was chosen

step2

Step 3: Replacing original description with the one from the template was done, some of the vulnerabilities were replaced, some of them were not

step3

Step 4: Another look at list, which is now sorted by the name

step4

Expected results

All of imported vulnerabilities have replaced and unified description.

OS

$ cat /etc/lsb-release DISTRIB_ID=Ubuntu DISTRIB_RELEASE=20.04 DISTRIB_CODENAME=focal DISTRIB_DESCRIPTION="Ubuntu 20.04.2 LTS"