Alert: This Finding is under review and may not be 100% accurate.
{% if dojo_user in finding.reviewers.all or dojo_user == finding.review_requested_by %}
[Clear Review]
{% endif %}
{% with finding|first_vulnerability_id as first_vulnerability_id %}
{% if first_vulnerability_id %}
{% if first_vulnerability_id|has_vulnerability_url %}
{{ first_vulnerability_id }}
{% else %}
{{ first_vulnerability_id }}
{% endif %}
{% endif %}
{% for scanner in found_by %}
{{ scanner }}
{% endfor %}
{% endwith %}
{% with finding|additional_vulnerability_ids as additional_vulnerability_ids %}
{% if additional_vulnerability_ids %}
Additional Vulnerability Ids
{% for vulnerability_id in additional_vulnerability_ids %}
{% if vulnerability_id|has_vulnerability_url%}
{{ vulnerability_id }}
{% else %}
{{ vulnerability_id }}
{% endif %}
{% if not forloop.last %}, {% endif %}
{% endfor %}
{% endif %}
{% endwith %}
{% if finding.static_finding or finding.line > 0 %}
{% if finding.sast_source_object or finding.sast_sink_object or finding.sast_source_file_path or finding.sast_source_line > 0 %}
{# For tools that give information on both source (start) and sink (end) of the attack vector #}
{% endif %}
{% endif %}
{% if finding.service or finding.file_path or finding.line > 0 or finding.has_jira_configured or finding.has_jira_issue or finding.github_issue or finding.github_conf_new or finding.finding_group or finding.component_name or finding.nb_occurences > 1 %}
{% if finding.service %}
Service
{% endif %}
{% if finding.file_path %}
Location
{% endif %}
{% if finding.line %}
Line Number
{% endif %}
{% if finding.nb_occurences > 1 %}
Nb occurences
{% endif %}
{% if finding.component_name %}
Component Name
{% endif %}
{% if finding.component_version %}
Component Version
{% endif %}
{% if finding.has_jira_configured or finding.jira_issue %}
JIRA
JIRA Change
{% endif %}
{% if finding.github_conf_new or finding.github_issue %}
GitHub
{% endif %}
{% if 'is_finding_groups_enabled'|system_setting_enabled and finding.finding_group %}
Group
{% endif %}
{% if finding.service %}
{{ finding.service }}
{% endif %}
{% if finding.file_path %}
{{ finding.get_file_path_with_link|safe }}
{% endif %}
{% if finding.line %}
{{ finding.line }}
{% endif %}
{% if finding.nb_occurences > 1 %}
{{ finding.nb_occurences }}
{% endif %}
{% if finding.component_name %}
{{ finding.component_name }}
{% endif %}
{% if finding.component_version %}
{{ finding.component_version }}
{% endif %}
{% if finding.has_jira_configured or finding.has_jira_issue or finding.has_jira_group_issue %}
{% endif %}
{% if 'is_finding_groups_enabled'|system_setting_enabled and finding.finding_group %}
{{ finding.finding_group.name }}
{% endif %}
{% endif %}
{% if finding.param or finding.payload %}
Injected Parameter(s)
{% if finding.payload %}
Payload
{% endif %}
{{ finding.param|default_if_none:"" }}
{% if finding.payload %}
{{ finding.payload|default_if_none:"" }}
{% endif %}
{% endif %}
{% if finding.duplicate_finding_set %}
{% comment %}
little extra div to serve as anchor, with some padding and padding cancelling margin to make sure it scrolls into view correctly
{% endcomment %}
No credentials configured.
{% if not cred_engagement %}
Configure engagement credentials first, then add a credential to the test or
finding.
{% endif %}
{% endif %}
{% endif %}
{% include "dojo/snippets/sonarqube_history.html" with finding=finding only %}
{% include "dojo/snippets/comments.html" with notes=notes object=finding destination="finding" %}
ProTip! Type e to edit any finding, p and n to navigate to the previous or next finding.