From d03ca52acf18f74adeaecce4aa70065ff61670a2 Mon Sep 17 00:00:00 2001 From: Nicolas Velasquez Date: Tue, 24 Jun 2025 14:43:59 +0200 Subject: [PATCH 1/2] fix(qualys_was_parser): update import paths for settings: to reflect current module structure --- dojo/tools/qualys_webapp/parser.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/dojo/tools/qualys_webapp/parser.py b/dojo/tools/qualys_webapp/parser.py index bc0dcd9590b..86777094d2c 100644 --- a/dojo/tools/qualys_webapp/parser.py +++ b/dojo/tools/qualys_webapp/parser.py @@ -8,13 +8,13 @@ from dojo.models import Endpoint, Finding try: - from django.conf.settings import QUALYS_WAS_WEAKNESS_IS_VULN + from dojo.settings.settings import QUALYS_WAS_WEAKNESS_IS_VULN except ImportError: # Avoid breaking change QUALYS_WAS_WEAKNESS_IS_VULN = False try: - from django.conf.settings import QUALYS_WAS_UNIQUE_ID + from dojo.settings.settings import QUALYS_WAS_UNIQUE_ID except ImportError: # Avoid breaking change QUALYS_WAS_UNIQUE_ID = False From c2dc2369f417a5569fca64a47ac22e9ea07c7248 Mon Sep 17 00:00:00 2001 From: Nicolas Velasquez Date: Tue, 24 Jun 2025 14:44:55 +0200 Subject: [PATCH 2/2] fix(qualys_was_parser): do not use access_path as endpoints, because they aren't --- dojo/tools/qualys_webapp/parser.py | 6 ------ 1 file changed, 6 deletions(-) diff --git a/dojo/tools/qualys_webapp/parser.py b/dojo/tools/qualys_webapp/parser.py index 86777094d2c..fc1a01b84ff 100644 --- a/dojo/tools/qualys_webapp/parser.py +++ b/dojo/tools/qualys_webapp/parser.py @@ -194,9 +194,6 @@ def get_unique_vulnerabilities( url = vuln.findtext("URL") if url is not None: urls.append(str(url)) - access_path = vuln.find("ACCESS_PATH") - if access_path is not None: - urls += [url.text for url in access_path.iter("URL")] payloads = vuln.find("PAYLOADS") req_resps = get_request_response(payloads) if payloads is not None else [[], []] @@ -258,9 +255,6 @@ def get_vulnerabilities( url = vuln.findtext("URL") if url is not None: urls.append(str(url)) - access_path = vuln.find("ACCESS_PATH") - if access_path is not None: - urls += [url.text for url in access_path.iter("URL")] payloads = vuln.find("PAYLOADS") req_resps = get_request_response(payloads) if payloads is not None else [[], []]