Thanks to visit codestin.com
Credit goes to github.com

Skip to content

tenable: check mandatory columns before importing #12273

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Apr 24, 2025
Merged

tenable: check mandatory columns before importing #12273

merged 1 commit into from
Apr 24, 2025

Conversation

valentijnscholten
Copy link
Member

@valentijnscholten valentijnscholten commented Apr 21, 2025 •
edited
Loading

Throw a clear error message when Plugin Name or asset.name are missing from the CSV report.

image

@dryrunsecurity DryRunSecurity
Copy link

dryrunsecurity bot commented Apr 21, 2025 •
edited
Loading

DryRun Security

This pull request improves the Tenable CSV parser by adding input validation to prevent processing of malformed CSV files, ensuring that at least one of three specified column names is present before parsing.

💭 Unconfirmed Findings (1)
Vulnerability Input Validation in Tenable CSV Parser
Description Located in 'dojo/tools/tenable/csv_format.py', this enhancement prevents processing of malformed CSV files by adding validation to ensure at least one of three column names exists, raising a ValueError for invalid files

All finding details can be found in the DryRun Security Dashboard.

@valentijnscholten valentijnscholten added this to the 2.45.3 milestone Apr 21, 2025
@valentijnscholten valentijnscholten force-pushed the tenable-check-fieldnames branch from a0ab323 to eb0833b Compare April 22, 2025 18:11
mtesauro
mtesauro approved these changes Apr 24, 2025
View reviewed changes
Copy link
Contributor

@mtesauro mtesauro left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved

@mtesauro mtesauro merged commit f763df3 into DefectDojo:bugfix Apr 24, 2025
77 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@mtesauro mtesauro mtesauro approved these changes

@dogboat dogboat dogboat approved these changes

@hblankenship hblankenship hblankenship approved these changes

@Maffooch Maffooch Maffooch approved these changes

Assignees
No one assigned
Labels
parser
Projects
None yet
Milestone
2.45.3
Development

Successfully merging this pull request may close these issues.
5 participants
@valentijnscholten @mtesauro @dogboat @hblankenship @Maffooch