{% extends "report_base.html" %} {% load static %} {% load display_tags %} {% load humanize %} {% load event_tags %} {% load get_endpoint_status %} {% load get_note_status %} {% load get_notetype_availability %} {% block content %} {{ block.super }}
Generated: {% display_date %}
{% if eng.name and eng.name|length > 0 %} The {{ eng.name }} {% else %} An {% endif %} engagement ran from {{ eng.target_start|date:"SHORT_DATE_FORMAT" }} {% if eng.target_end %} to {{ eng.target_end|date:"SHORT_DATE_FORMAT" }}. {% else %} and is ongoing. {% endif %}
{% if eng.test_set %}The engagement included the following tests:
The test strategy for this engagement can be viewed at
{{ eng.test_strategy }}
No engagements found for {{ product.name }}
{% endif %}{% if item %} {{ item }}{% endif %} | {% endfor %}
A total of {{ findings|length|apnumber }} finding{{ findings|length|pluralize }} of varying severity are represented in this report.
This report represents a security audit performed by the {{ team_name }} team. It contains confidential information about the state of your network and applications. Access to this information by unauthorized personnel may allow them to compromise your network.
{{ disclaimer }}
{% for test in engagement.test_set.all %}
{% if test.notes.all %}
{% for note in test.notes.all %}
{% if not note.private %}
{{ note.author }} - {{ note.date }} - {{ note }}
{% endif %}
{% endfor %}
{% endif %}
{% endfor %}
Name | Date | Severity |
---|---|---|
{{ finding.title }} | {{ finding.date }} | {{ finding.severity }} |
Severity | EPSS Score / Percentile | Status | {% if finding.risk_acceptance_set.all %}Acceptance | {% endif %}Date discovered | Age | Reporter | {% if finding.mitigated %}Date Mitigated | Mitigated By | {% endif %} {% if finding.cwe > 0 %}CWE | {% endif %}Dojo ID |
---|---|---|---|---|---|---|---|---|---|---|
{% if finding.severity %} {{ finding.severity }} {% else %} Unknown {% endif %} | {{ finding.epss_score|format_epss }} / {{ finding.epss_percentile|format_epss }} | {{ finding.status }} | {% if finding.risk_acceptance_set.all %}{% comment %} for some reason the font-awesome icons don't work with the report template{% endcomment %} {% for ra in finding.risk_acceptance_set.all|slice:":5" %} acceptance {% endfor %} | {% endif %}{{ finding.date }} | {{ finding.age }} days | {{ finding.reporter }} | {% if finding.mitigated %}{{ finding.mitigated }} | {{ finding.mitigated_by }} | {% endif %} {% if finding.cwe > 0 %}{{ finding.cwe }} | {% endif %}{{ finding.id }} |
{{ finding.cvssv3|markdown_render }}{% endif %}
{{ finding.description|markdown_render }}{% if finding.mitigation %}
{{ finding.mitigation|markdown_render }}{% endif %} {% if finding.get_report_requests %}
{{ req.get_request }}{% if req.get_response != "" %}
{{ req.get_response|truncatechars_html:800 }}{% endif %} {% endfor %} {% endif %} {% if finding.impact %}
{{ finding.impact|markdown_render }}{% endif %} {% if finding.steps_to_reproduce %}
{{ finding.steps_to_reproduce|markdown_render }}{% endif %} {% if finding.severity_justification %}
{{ finding.severity_justification|markdown_render }}{% endif %} {% if finding.references %}
{{ finding.references|markdown_render }}{% endif %} {% if include_finding_images %} {% include "dojo/snippets/file_images.html" with size='original' obj=finding format="HTML" %} {% endif %} {% if include_finding_notes %} {% with notes=finding.notes.all|get_public_notes %} {% if notes.count > 0 %}
User | Date | {% with notes_with_type=notes|get_notetype_notes_count %} {% if notes_with_type > 0 %}Note Type | {% endif %}Note |
---|---|---|---|
{{ note.author.username }} | {{ note.date }} | {% if notes_with_type > 0 %}{% if note.note_type != None %} {{ note.note_type }} {% endif %} | {% endif %}{{ note|linebreaks }} |