🎉 add MGASA vulnid

[manuel-sommer]

No description provided.

[dryrunsecurity]

DryRun Security Summary

The pull request enhances DefectDojo's vulnerability ID mapping functionality by adding new mappings for "MGASA-", "OSV-", and "PYSEC-" prefixes in the settings file, enabling automatic generation of links to corresponding vulnerability information pages.

Expand for full summary

Summary:

The code change in this pull request is focused on enhancing the vulnerability ID mapping functionality in the dojo/settings/settings.dist.py file of the DefectDojo application. Specifically, it is adding new mappings for the "MGASA-", "OSV-", and "PYSEC-" vulnerability ID prefixes, which will allow DefectDojo to automatically generate links to the corresponding vulnerability information pages when these prefixes are encountered in the data being processed.

From an application security perspective, this change is a positive improvement that will increase the usefulness and value of the DefectDojo application for organizations managing their application security posture. By expanding the set of supported vulnerability ID formats, DefectDojo can provide more comprehensive and accurate vulnerability information to its users, which can help improve their overall security awareness and decision-making.

Files Changed:

• dojo/settings/settings.dist.py: This file has been updated to add new vulnerability ID mapping formats to the saml2_attrib_map_format function. Specifically, the following new mappings have been added:
  1. "MGASA-": "https://advisories.mageia.org/&&.html" - This maps the "MGASA-" vulnerability ID prefix to the Mageia Linux security advisories URL.
  2. "OSV-": "https://osv.dev/vulnerability/" - This maps the "OSV-" vulnerability ID prefix to the OSV (Open Source Vulnerabilities) vulnerability database URL.
  3. "PYSEC-": "https://osv.dev/vulnerability/" - This maps the "PYSEC-" vulnerability ID prefix to the OSV vulnerability database URL.

Code Analysis

We ran 9 analyzers against 1 file and 0 analyzers had findings. 9 analyzers had no findings.

View PR in the DryRun Dashboard.

[mtesauro]

Approved