You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/content/en/connecting_your_tools/parsers/file/burp_enterprise.md
+99-5Lines changed: 99 additions & 5 deletions
Original file line number
Diff line number
Diff line change
@@ -3,11 +3,105 @@ title: "Burp Enterprise Scan"
3
3
toc_hide: true
4
4
---
5
5
6
-
### File Types
7
-
DefectDojo parser accepts a Standard Report as an HTML file. To parse an XML file instead, use this method: https://documentation.defectdojo.com/integrations/parsers/file/burp/
6
+
##Overview
7
+
The Burp Enterprise Scan parser processes HTML reports from Burp Enterprise Edition and imports the findings into DefectDojo. The parser extracts vulnerability details, severity ratings, descriptions, remediation steps, and other metadata from the HTML report.
8
8
9
-
See also Burp documentation for info on how to export a Standard Report:
The parser accepts a Standard Report as an HTML file. To parse an XML file instead, use the [Burp XML parser](https://docs.defectdojo.com/en/connecting_your_tools/parsers/file/burp/).
11
+
12
+
See the Burp documentation for information on how to export a Standard Report: [PortSwigger Enterprise Edition Downloading reports](https://portswigger.net/burp/documentation/enterprise/work-with-scan-results/generate-reports)
13
+
14
+
## Standard Format HTML (Main Format)
15
+
16
+
### Total Fields in HTML
17
+
- Total data fields in Burp Enterprise Scan HTML output: 15
18
+
- Total data fields parsed into DefectDojo finding: 13
19
+
- Total data fields NOT parsed: 2
20
+
21
+
### Standard Format Field Mapping Details
22
+
23
+
| Data Field # | Burp Enterprise Scan Data Field | DefectDojo Finding Field | Parser Line # | Notes |
No special date processing is performed. The parser uses the current date for the finding.
63
+
64
+
#### Status Conversion
65
+
All findings are set with default status values:
66
+
-`false_p = False`
67
+
-`duplicate = False`
68
+
-`out_of_scope = False`
69
+
-`mitigated = None`
70
+
-`active = True`
71
+
-`verified = False`
72
+
73
+
#### Severity Conversion
74
+
Severity values are directly mapped from the Burp report without conversion.
75
+
76
+
#### Description Construction
77
+
The description field is constructed by combining content from "issue detail" and "issue description" sections. The content is formatted with headers and the original text, including proper formatting of lists, links, and other HTML elements. The description typically begins with "**Issue detail**:" or "**Issue description**:" followed by the content, with multiple sections separated by "---" markdown dividers.
78
+
79
+
#### Title Format
80
+
Finding titles are extracted directly from the h2 elements in issue containers or from table rows with the "issue-type-row" class.
81
+
82
+
#### Mitigation Construction
83
+
The mitigation field is constructed by combining content from "remediation detail" and "remediation background" sections, with proper formatting.
84
+
85
+
#### Deduplication
86
+
No explicit deduplication logic is implemented in the parser. DefectDojo's standard deduplication will apply based on the hash_code generated from the finding details.
87
+
88
+
#### Tags Handling
89
+
No specific tag handling is implemented in the parser.
90
+
91
+
#### Common settings for all findings
92
+
All findings are set with:
93
+
-`static_finding = False`
94
+
-`dynamic_finding = True`
95
+
96
+
## Unique Parser Characteristics
97
+
This parser has special handling for different section types within the HTML report:
98
+
- It handles both the main vulnerability data in "issue-container" divs and table-based data separately
99
+
- It includes processing for evidence containers with request/response pairs
100
+
- It performs formatting of HTML content including links, lists, and other elements to maintain readable descriptions
101
+
- It extracts CWE numbers and vulnerability classifications from reference sections
11
102
12
103
### Sample Scan Data
13
-
Sample Burp Enterprise Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/burp_enterprise).
104
+
Sample Burp Enterprise Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/burp_enterprise).
description: Drop support for PostgreSQL-HA in HELM
6
+
---
7
+
### Drop support for PostgreSQL-HA in HELM
8
+
9
+
This release removes support for the PostgreSQL-HA (High Availability) Helm chart as a dependency in the DefectDojo Helm chart. Users relying on the PostgreSQL-HA Helm chart will need to transition to using the standard PostgreSQL configuration or an external PostgreSQL database.
10
+
11
+
There are no special instructions for upgrading to 2.47.x. Check the [Release Notes](https://github.com/DefectDojo/django-DefectDojo/releases/tag/2.47.0) for the contents of the release.
0 commit comments