Skip to content

Qualys: do not use access_path as endpoints #12681

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 2 commits into
base: dev
Choose a base branch
from
+2 −8
Open

Qualys: do not use access_path as endpoints #12681

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
d03ca52
fix(qualys_was_parser): update import paths for settings: to reflect …
nv-pipo Jun 24, 2025
c2dc236
fix(qualys_was_parser): do not use access_path as endpoints, because …
nv-pipo Jun 24, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 2 additions & 8 deletions dojo/tools/qualys_webapp/parser.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,13 +8,13 @@
from dojo.models import Endpoint, Finding

try:
from django.conf.settings import QUALYS_WAS_WEAKNESS_IS_VULN
from dojo.settings.settings import QUALYS_WAS_WEAKNESS_IS_VULN
except ImportError:
# Avoid breaking change
QUALYS_WAS_WEAKNESS_IS_VULN = False

try:
from django.conf.settings import QUALYS_WAS_UNIQUE_ID
from dojo.settings.settings import QUALYS_WAS_UNIQUE_ID
except ImportError:
# Avoid breaking change
QUALYS_WAS_UNIQUE_ID = False
Expand Down Expand Up @@ -194,9 +194,6 @@ def get_unique_vulnerabilities(
url = vuln.findtext("URL")
if url is not None:
urls.append(str(url))
access_path = vuln.find("ACCESS_PATH")
if access_path is not None:
urls += [url.text for url in access_path.iter("URL")]
payloads = vuln.find("PAYLOADS")
req_resps = get_request_response(payloads) if payloads is not None else [[], []]

Expand Down Expand Up @@ -258,9 +255,6 @@ def get_vulnerabilities(
url = vuln.findtext("URL")
if url is not None:
urls.append(str(url))
access_path = vuln.find("ACCESS_PATH")
if access_path is not None:
urls += [url.text for url in access_path.iter("URL")]
payloads = vuln.find("PAYLOADS")
req_resps = get_request_response(payloads) if payloads is not None else [[], []]

Expand Down