Skip to content

Commit

Permalink
Merge pull request #855 from Ostorlab/feature/vulnerability-report-up…
Browse files Browse the repository at this point in the history
…dates

Update vulnerability reporting to include exploitation and post exploitation details
  • Loading branch information
Zakaria-Latif authored Jan 10, 2025
2 parents f85c5c4 + d1a653d commit b10fc76
Showing 1 changed file with 6 additions and 0 deletions.
6 changes: 6 additions & 0 deletions src/ostorlab/agent/mixins/agent_report_vulnerability_mixin.py
Original file line number Diff line number Diff line change
Expand Up @@ -77,6 +77,8 @@ def report_vulnerability(
risk_rating: RiskRating,
dna: Optional[str] = None,
vulnerability_location: Optional[VulnerabilityLocation] = None,
exploitation_detail: Optional[str] = None,
post_exploitation_detail: Optional[str] = None,
) -> None:
"""Fetch the details of an entry from the knowledge base, and emit a vulnerability message.
Args:
Expand All @@ -85,6 +87,8 @@ def report_vulnerability(
risk_rating: the risk rating assigned to the result of the scan.
dna: unique identifier for duplicate vulnerabilities.
vulnerability_location: vulnerability location where the vulnerability was detected.
exploitation_detail: steps taken to exploit the vulnerability.
post_exploitation_detail: impact or aftermath of the exploitation.
Returns:
None
"""
Expand Down Expand Up @@ -126,6 +130,8 @@ def report_vulnerability(
"cvss_v4_vector": cvss_v4_vector,
"dna": dna,
"category_groups": category_groups,
"exploitation_detail": exploitation_detail,
"post_exploitation_detail": post_exploitation_detail,
}
if vulnerability_location is not None:
data["vulnerability_location"] = vulnerability_location.to_dict()
Expand Down

0 comments on commit b10fc76

Please sign in to comment.