annotate farol/vulnerability.py @ 178:e46fb0027e52 tip

Added tag 1.1.1 for changeset ae584cfe6252
author Benoît Allard <benoit.allard@greenbone.net>
date Thu, 08 Jan 2015 14:37:57 +0100
parents 5535ac5fef37
children
rev   line source
0
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
1 # -*- encoding: utf-8 -*-
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
2 # Description:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
3 # Web stuff related to the Vulnerabilities
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
4 #
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
5 # Authors:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
6 # BenoƮt Allard <benoit.allard@greenbone.net>
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
7 #
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
8 # Copyright:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
9 # Copyright (C) 2014 Greenbone Networks GmbH
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
10 #
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
11 # This program is free software; you can redistribute it and/or
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
12 # modify it under the terms of the GNU General Public License
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
13 # as published by the Free Software Foundation; either version 2
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
14 # of the License, or (at your option) any later version.
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
15 #
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
16 # This program is distributed in the hope that it will be useful,
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
17 # but WITHOUT ANY WARRANTY; without even the implied warranty of
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
18 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
19 # GNU General Public License for more details.
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
20 #
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
21 # You should have received a copy of the GNU General Public License
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
22 # along with this program; if not, write to the Free Software
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
23 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
24
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
25 from flask import (Blueprint, render_template, abort, redirect, request,
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
26 url_for)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
27
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
28 from farolluz.cvrf import (CVRFVulnerability, CVRFVulnerabilityID, CVRFNote,
62
ce49bd1512dd Make pyflafes a happier
Benoît Allard <benoit.allard@greenbone.net>
parents: 61
diff changeset
29 CVRFReference, CVRFCWE, CVRFInvolvement, CVRFThreat, CVRFProductStatus,
ce49bd1512dd Make pyflafes a happier
Benoît Allard <benoit.allard@greenbone.net>
parents: 61
diff changeset
30 CVRFCVSSSet, CVRFRemediation)
0
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
31 from farolluz.renderer import utcnow
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
32
60
c6e7175ff28c Unify acknowledgments update/creation from forms
Benoît Allard <benoit.allard@greenbone.net>
parents: 59
diff changeset
33 from .controller import (update_note_from_request, create_note_from_request,
100
5535ac5fef37 Be more permissive when parsing dates
Benoît Allard <benoit.allard@greenbone.net>
parents: 98
diff changeset
34 update_reference_from_request, create_reference_from_request, parseDate,
60
c6e7175ff28c Unify acknowledgments update/creation from forms
Benoît Allard <benoit.allard@greenbone.net>
parents: 59
diff changeset
35 update_acknowledgment_from_request, create_acknowledgment_from_request)
0
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
36 from .session import document_required, get_current
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
37
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
38
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
39 vulnerability = Blueprint('vulnerability', __name__)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
40
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
41 def get_vuln(ordinal):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
42 for vulnerability in get_current()._vulnerabilities:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
43 if vulnerability._ordinal != ordinal:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
44 continue
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
45 return vulnerability
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
46 abort(404)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
47
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
48 def vuln_from_form(form, vuln=None):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
49 if vuln is None:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
50 vuln = CVRFVulnerability(int(form['ordinal']))
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
51 else:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
52 vuln._ordinal = int(form['ordinal'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
53 vuln.setTitle(form['title'] or None)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
54 vuln_id = None
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
55 if form['systemname'] or form['id_value']:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
56 vuln_id = CVRFVulnerabilityID(form['systemname'], form['id_value'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
57 vuln.setID(vuln_id)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
58 date = None
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
59 if form['discoverydate']:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
60 date = parseDate(form['discoverydate'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
61 vuln.setDiscoveryDate(date)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
62 date = None
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
63 if form['releasedate']:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
64 date = parseDate(form['releasedate'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
65 vuln.setReleaseDate(date)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
66 vuln.setCVE(request.form['cve'] or None)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
67 return vuln
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
68
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
69 def get_groups():
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
70 """ Return a list of tuple suitable for selectinput2 """
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
71 cvrf = get_current()
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
72 groups = []
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
73 if cvrf._producttree is not None:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
74 groups = [(g.getTitle(), g._groupid) for g in cvrf._producttree._groups]
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
75 return groups
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
76
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
77 @vulnerability.route('/<int:ordinal>')
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
78 @document_required
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
79 def view(ordinal):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
80 return render_template('vulnerability/view.j2', vulnerability=get_vuln(ordinal))
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
81
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
82 @vulnerability.route('/<int:ordinal>/edit', methods=['GET', 'POST'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
83 @document_required
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
84 def edit(ordinal):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
85 vuln = get_vuln(ordinal)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
86 if request.method != 'POST':
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
87 return render_template('vulnerability/edit.j2', vulnerability=vuln, now=utcnow())
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
88
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
89 vuln_from_form(request.form, vuln)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
90 return redirect(url_for('.view', ordinal=vuln._ordinal))
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
91
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
92 @vulnerability.route('/add', methods=['GET', 'POST'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
93 @document_required
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
94 def add():
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
95 if request.method != 'POST':
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
96 next_ordinal=1
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
97 vulns = get_current()._vulnerabilities
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
98 if vulns:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
99 next_ordinal = vulns[-1]._ordinal + 1
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
100 vuln = CVRFVulnerability(next_ordinal)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
101 return render_template('vulnerability/edit.j2', vulnerability=vuln, now=utcnow(), action='Add')
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
102
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
103 vuln=vuln_from_form(request.form)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
104 get_current().addVulnerability(vuln)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
105 return redirect(url_for('.view', ordinal=vuln._ordinal))
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
106
98
9b525f33080a Add deletion of Vulnerabilities as a whole
Benoît Allard <benoit.allard@greenbone.net>
parents: 97
diff changeset
107 @vulnerability.route('/<int:ordinal>/del', methods=['POST'])
9b525f33080a Add deletion of Vulnerabilities as a whole
Benoît Allard <benoit.allard@greenbone.net>
parents: 97
diff changeset
108 @document_required
9b525f33080a Add deletion of Vulnerabilities as a whole
Benoît Allard <benoit.allard@greenbone.net>
parents: 97
diff changeset
109 def delete(ordinal):
9b525f33080a Add deletion of Vulnerabilities as a whole
Benoît Allard <benoit.allard@greenbone.net>
parents: 97
diff changeset
110 vuln = get_vuln(ordinal)
9b525f33080a Add deletion of Vulnerabilities as a whole
Benoît Allard <benoit.allard@greenbone.net>
parents: 97
diff changeset
111 get_current()._vulnerabilities.remove(vuln)
9b525f33080a Add deletion of Vulnerabilities as a whole
Benoît Allard <benoit.allard@greenbone.net>
parents: 97
diff changeset
112 return redirect(url_for('document.view'))
9b525f33080a Add deletion of Vulnerabilities as a whole
Benoît Allard <benoit.allard@greenbone.net>
parents: 97
diff changeset
113
0
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
114 @vulnerability.route('/<int:ordinal>/note/<int:note_ordinal>')
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
115 @document_required
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
116 def view_note(ordinal, note_ordinal):
59
64403f1b424e Make use of the new getNote methods on CVRFVulnerability
Benoît Allard <benoit.allard@greenbone.net>
parents: 58
diff changeset
117 note = get_vuln(ordinal).getNote(note_ordinal)
64403f1b424e Make use of the new getNote methods on CVRFVulnerability
Benoît Allard <benoit.allard@greenbone.net>
parents: 58
diff changeset
118 if note is None:
64403f1b424e Make use of the new getNote methods on CVRFVulnerability
Benoît Allard <benoit.allard@greenbone.net>
parents: 58
diff changeset
119 abort(404)
64403f1b424e Make use of the new getNote methods on CVRFVulnerability
Benoît Allard <benoit.allard@greenbone.net>
parents: 58
diff changeset
120 return render_template('vulnerability/view_note.j2', note=note, ordinal=ordinal)
0
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
121
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
122 @vulnerability.route('/<int:ordinal>/note/<int:note_ordinal>/edit', methods=['GET', 'POST'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
123 @document_required
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
124 def edit_note(ordinal, note_ordinal):
59
64403f1b424e Make use of the new getNote methods on CVRFVulnerability
Benoît Allard <benoit.allard@greenbone.net>
parents: 58
diff changeset
125 note = get_vuln(ordinal).getNote(note_ordinal)
0
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
126 if note is None:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
127 abort(404)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
128 if request.method != 'POST':
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
129 return render_template('vulnerability/edit_note.j2', note=note, ordinal=ordinal, types=note.TYPES)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
130
58
fbc413b8a46e Unify note update/creation from forms
Benoît Allard <benoit.allard@greenbone.net>
parents: 0
diff changeset
131 update_note_from_request(note)
0
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
132 return redirect(url_for('.view_note', ordinal=ordinal, note_ordinal=note._ordinal))
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
133
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
134 @vulnerability.route('/<int:ordinal>/note/add', methods=['GET', 'POST'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
135 @document_required
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
136 def add_note(ordinal):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
137 if request.method != 'POST':
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
138 next_ordinal = 1
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
139 notes = get_vuln(ordinal)._notes
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
140 if notes:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
141 next_ordinal = notes[-1]._ordinal + 1
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
142 return render_template('vulnerability/edit_note.j2', ordinal=ordinal, note_ordinal=next_ordinal, types=CVRFNote.TYPES, action='Add')
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
143
58
fbc413b8a46e Unify note update/creation from forms
Benoît Allard <benoit.allard@greenbone.net>
parents: 0
diff changeset
144 note = create_note_from_request()
0
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
145 get_vuln(ordinal).addNote(note)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
146 return redirect(url_for('.view', ordinal=ordinal))
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
147
89
e558238cfdb2 Add deletion of Vulnerabilities'Notes
Benoît Allard <benoit.allard@greenbone.net>
parents: 64
diff changeset
148 @vulnerability.route('/<int:ordinal>/note/<int:note_ordinal>/del', methods=['POST'])
e558238cfdb2 Add deletion of Vulnerabilities'Notes
Benoît Allard <benoit.allard@greenbone.net>
parents: 64
diff changeset
149 @document_required
e558238cfdb2 Add deletion of Vulnerabilities'Notes
Benoît Allard <benoit.allard@greenbone.net>
parents: 64
diff changeset
150 def del_note(ordinal, note_ordinal):
e558238cfdb2 Add deletion of Vulnerabilities'Notes
Benoît Allard <benoit.allard@greenbone.net>
parents: 64
diff changeset
151 vuln = get_vuln(ordinal)
e558238cfdb2 Add deletion of Vulnerabilities'Notes
Benoît Allard <benoit.allard@greenbone.net>
parents: 64
diff changeset
152 note = vuln.getNote(ordinal)
e558238cfdb2 Add deletion of Vulnerabilities'Notes
Benoît Allard <benoit.allard@greenbone.net>
parents: 64
diff changeset
153 if note is None:
e558238cfdb2 Add deletion of Vulnerabilities'Notes
Benoît Allard <benoit.allard@greenbone.net>
parents: 64
diff changeset
154 flash('Note not found', 'danger')
e558238cfdb2 Add deletion of Vulnerabilities'Notes
Benoît Allard <benoit.allard@greenbone.net>
parents: 64
diff changeset
155 abort(404)
e558238cfdb2 Add deletion of Vulnerabilities'Notes
Benoît Allard <benoit.allard@greenbone.net>
parents: 64
diff changeset
156 vuln._notes.remove(note)
e558238cfdb2 Add deletion of Vulnerabilities'Notes
Benoît Allard <benoit.allard@greenbone.net>
parents: 64
diff changeset
157 return redirect(url_for('.view', ordinal=ordinal))
e558238cfdb2 Add deletion of Vulnerabilities'Notes
Benoît Allard <benoit.allard@greenbone.net>
parents: 64
diff changeset
158
0
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
159
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
160 @vulnerability.route('/<int:ordinal>/involvement/<int:index>')
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
161 @document_required
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
162 def view_involvement(ordinal, index):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
163 try:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
164 involvement = get_vuln(ordinal)._involvements[index]
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
165 except IndexError:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
166 abort(404)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
167 return render_template('vulnerability/view_involvement.j2', involvement=involvement, ordinal=ordinal, index=index)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
168
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
169 @vulnerability.route('/<int:ordinal>/involvement/add', methods=['GET', 'POST'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
170 @document_required
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
171 def add_involvement(ordinal):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
172 if request.method != 'POST':
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
173 return render_template('vulnerability/edit_involvement.j2', ordinal=ordinal, parties=CVRFInvolvement.PARTIES, statuses=CVRFInvolvement.STATUSES, action='Add')
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
174
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
175 inv = CVRFInvolvement(request.form['party'], request.form['status'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
176 inv._description = request.form['description'] or None
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
177 get_vuln(ordinal).addInvolvement(inv)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
178 return redirect(url_for('.view', ordinal=ordinal))
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
179
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
180 @vulnerability.route('/<int:ordinal>/involvement/<int:index>/edit', methods=['GET', 'POST'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
181 @document_required
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
182 def edit_involvement(ordinal, index):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
183 try:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
184 involvement = get_vuln(ordinal)._involvements[index]
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
185 except IndexError:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
186 abort(404)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
187 if request.method != 'POST':
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
188 return render_template('vulnerability/edit_involvement.j2', ordinal=ordinal, index=index, party=involvement._party, status=involvement._status, description=involvement._description, parties=involvement.PARTIES, statuses=involvement.STATUSES)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
189
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
190 involvement._party = request.form['party']
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
191 involvement._status = request.form['status']
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
192 involvement._description = request.form['description'] or None
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
193 return redirect(url_for('.view_involvement', ordinal=ordinal, index=index))
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
194
90
2201d0ea0bf3 Add deletion of Involvements
Benoît Allard <benoit.allard@greenbone.net>
parents: 89
diff changeset
195 @vulnerability.route('/<int:ordinal>/involvement/<int:index>/del', methods=['POST'])
2201d0ea0bf3 Add deletion of Involvements
Benoît Allard <benoit.allard@greenbone.net>
parents: 89
diff changeset
196 @document_required
2201d0ea0bf3 Add deletion of Involvements
Benoît Allard <benoit.allard@greenbone.net>
parents: 89
diff changeset
197 def del_involvement(ordinal, index):
2201d0ea0bf3 Add deletion of Involvements
Benoît Allard <benoit.allard@greenbone.net>
parents: 89
diff changeset
198 invls = get_vuln(ordinal)._involvements
2201d0ea0bf3 Add deletion of Involvements
Benoît Allard <benoit.allard@greenbone.net>
parents: 89
diff changeset
199 if not ( 0 <= index < len(invls)):
2201d0ea0bf3 Add deletion of Involvements
Benoît Allard <benoit.allard@greenbone.net>
parents: 89
diff changeset
200 flash('Involvement not found', 'danger')
2201d0ea0bf3 Add deletion of Involvements
Benoît Allard <benoit.allard@greenbone.net>
parents: 89
diff changeset
201 abort(404)
2201d0ea0bf3 Add deletion of Involvements
Benoît Allard <benoit.allard@greenbone.net>
parents: 89
diff changeset
202
2201d0ea0bf3 Add deletion of Involvements
Benoît Allard <benoit.allard@greenbone.net>
parents: 89
diff changeset
203 del invls[index]
2201d0ea0bf3 Add deletion of Involvements
Benoît Allard <benoit.allard@greenbone.net>
parents: 89
diff changeset
204 return redirect(url_for('.view', ordinal=ordinal))
2201d0ea0bf3 Add deletion of Involvements
Benoît Allard <benoit.allard@greenbone.net>
parents: 89
diff changeset
205
2201d0ea0bf3 Add deletion of Involvements
Benoît Allard <benoit.allard@greenbone.net>
parents: 89
diff changeset
206
0
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
207 @vulnerability.route('/<int:ordinal>/cwe/<int:index>/edit', methods=['GET', 'POST'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
208 @document_required
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
209 def edit_cwe(ordinal, index):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
210 try:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
211 cwe = get_vuln(ordinal)._cwes[index]
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
212 except IndexError:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
213 abort(404)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
214 if request.method != 'POST':
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
215 return render_template('vulnerability/edit_cwe.j2', ordinal=ordinal, _id=cwe._id, description=cwe._value)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
216
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
217 cwe._id = request.form['id']
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
218 cwe._value = request.form['description']
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
219 return redirect(url_for('.view', ordinal=ordinal))
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
220
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
221 @vulnerability.route('/<int:ordinal>/cwe/add', methods=['GET', 'POST'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
222 @document_required
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
223 def add_cwe(ordinal):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
224 if request.method != 'POST':
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
225 return render_template('vulnerability/edit_cwe.j2', ordinal=ordinal, action='Add')
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
226
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
227 cwe = CVRFCWE(request.form['id'], request.form['description'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
228 get_vuln(ordinal).addCWE(cwe)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
229 return redirect(url_for('.view', ordinal=ordinal))
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
230
91
6a61c02f2156 Add deletion of CWEs
Benoît Allard <benoit.allard@greenbone.net>
parents: 90
diff changeset
231 @vulnerability.route('/<int:ordinal>/cwe/<int:index>/del', methods=['POST'])
6a61c02f2156 Add deletion of CWEs
Benoît Allard <benoit.allard@greenbone.net>
parents: 90
diff changeset
232 @document_required
6a61c02f2156 Add deletion of CWEs
Benoît Allard <benoit.allard@greenbone.net>
parents: 90
diff changeset
233 def del_cwe(ordinal, index):
6a61c02f2156 Add deletion of CWEs
Benoît Allard <benoit.allard@greenbone.net>
parents: 90
diff changeset
234 cwes = get_vuln(ordinal)._cwes
6a61c02f2156 Add deletion of CWEs
Benoît Allard <benoit.allard@greenbone.net>
parents: 90
diff changeset
235 if not ( 0 <= index < len(cwes)):
6a61c02f2156 Add deletion of CWEs
Benoît Allard <benoit.allard@greenbone.net>
parents: 90
diff changeset
236 flash('CWE not found', 'danger')
6a61c02f2156 Add deletion of CWEs
Benoît Allard <benoit.allard@greenbone.net>
parents: 90
diff changeset
237 abort(404)
6a61c02f2156 Add deletion of CWEs
Benoît Allard <benoit.allard@greenbone.net>
parents: 90
diff changeset
238 del cwes[index]
6a61c02f2156 Add deletion of CWEs
Benoît Allard <benoit.allard@greenbone.net>
parents: 90
diff changeset
239 return redirect(url_for('.view', ordinal=ordinal))
6a61c02f2156 Add deletion of CWEs
Benoît Allard <benoit.allard@greenbone.net>
parents: 90
diff changeset
240
6a61c02f2156 Add deletion of CWEs
Benoît Allard <benoit.allard@greenbone.net>
parents: 90
diff changeset
241
0
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
242 @vulnerability.route('/<int:ordinal>/productstatus/<int:index>')
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
243 @document_required
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
244 def view_status(ordinal, index):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
245 try:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
246 status = get_vuln(ordinal)._productstatuses[index]
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
247 except IndexError:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
248 abort(404)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
249 return render_template('vulnerability/view_productstatus.j2', ordinal=ordinal, index=index, status=status, cvrf=get_current())
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
250
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
251 @vulnerability.route('/<int:ordinal>/productstatus/add', methods=['GET', 'POST'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
252 @document_required
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
253 def add_status(ordinal):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
254 if request.method != 'POST':
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
255 return render_template('vulnerability/edit_productstatus.j2', ordinal=ordinal, statuses=CVRFProductStatus.TYPES, action='Add')
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
256
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
257 status = CVRFProductStatus(request.form['status'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
258 for productid in request.form.getlist('products'):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
259 status.addProductID(productid)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
260 get_vuln(ordinal).addProductStatus(status)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
261 return redirect(url_for('.view', ordinal=ordinal))
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
262
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
263 @vulnerability.route('/<int:ordinal>/productstatus/<int:index>/edit', methods=['GET', 'POST'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
264 @document_required
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
265 def edit_status(ordinal, index):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
266 try:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
267 status = get_vuln(ordinal)._productstatuses[index]
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
268 except IndexError:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
269 abort(404)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
270 if request.method != 'POST':
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
271 return render_template('vulnerability/edit_productstatus.j2', ordinal=ordinal, index=index, status=status._type, productids=status._productids, statuses=status.TYPES)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
272
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
273 status._type = request.form['status']
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
274 status._productids = []
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
275 for productid in request.form.getlist('products'):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
276 status.addProductID(productid)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
277 return redirect(url_for('.view', ordinal=ordinal))
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
278
92
33d6fd9a5e12 Add deletion of Product Statuses
Benoît Allard <benoit.allard@greenbone.net>
parents: 91
diff changeset
279 @vulnerability.route('/<int:ordinal>/productstatus/<int:index>/del', methods=['POST'])
33d6fd9a5e12 Add deletion of Product Statuses
Benoît Allard <benoit.allard@greenbone.net>
parents: 91
diff changeset
280 @document_required
33d6fd9a5e12 Add deletion of Product Statuses
Benoît Allard <benoit.allard@greenbone.net>
parents: 91
diff changeset
281 def del_status(ordinal, index):
33d6fd9a5e12 Add deletion of Product Statuses
Benoît Allard <benoit.allard@greenbone.net>
parents: 91
diff changeset
282 statuses = get_vuln(ordinal)._productstatuses
33d6fd9a5e12 Add deletion of Product Statuses
Benoît Allard <benoit.allard@greenbone.net>
parents: 91
diff changeset
283 if not ( 0 <= index < len(statuses)):
33d6fd9a5e12 Add deletion of Product Statuses
Benoît Allard <benoit.allard@greenbone.net>
parents: 91
diff changeset
284 flash('Product Status not found', 'danger')
33d6fd9a5e12 Add deletion of Product Statuses
Benoît Allard <benoit.allard@greenbone.net>
parents: 91
diff changeset
285 abort(404)
33d6fd9a5e12 Add deletion of Product Statuses
Benoît Allard <benoit.allard@greenbone.net>
parents: 91
diff changeset
286
33d6fd9a5e12 Add deletion of Product Statuses
Benoît Allard <benoit.allard@greenbone.net>
parents: 91
diff changeset
287 del statuses[index]
33d6fd9a5e12 Add deletion of Product Statuses
Benoît Allard <benoit.allard@greenbone.net>
parents: 91
diff changeset
288 return redirect(url_for('.view', ordinal=ordinal))
33d6fd9a5e12 Add deletion of Product Statuses
Benoît Allard <benoit.allard@greenbone.net>
parents: 91
diff changeset
289
0
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
290
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
291 @vulnerability.route('/<int:ordinal>/threat/<int:index>')
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
292 @document_required
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
293 def view_threat(ordinal, index):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
294 try:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
295 threat = get_vuln(ordinal)._threats[index]
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
296 except IndexError:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
297 abort(404)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
298 return render_template('vulnerability/view_threat.j2', ordinal=ordinal, index=index, threat=threat, cvrf=get_current())
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
299
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
300 @vulnerability.route('/<int:ordinal>/threat/add', methods=['GET', 'POST'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
301 @document_required
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
302 def add_threat(ordinal):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
303 if request.method != 'POST':
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
304 return render_template('vulnerability/edit_threat.j2',
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
305 ordinal=ordinal,
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
306 types=CVRFThreat.TYPES, groups=get_groups(), now=utcnow(),
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
307 action='Add')
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
308
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
309 threat = CVRFThreat(request.form['type'], request.form['description'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
310 if request.form['date']:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
311 threat.setDate(parseDate(request.form['date']))
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
312 for productid in request.form.getlist('products'):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
313 threat.addProductID(productid)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
314 for groupid in request.form.getlist('groups'):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
315 threat.addGroupID(groupid)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
316 get_vuln(ordinal).addThreat(threat)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
317 return redirect(url_for('.view', ordinal=ordinal))
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
318
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
319 @vulnerability.route('/<int:ordinal>/threat/<int:index>/edit', methods=['GET', 'POST'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
320 @document_required
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
321 def edit_threat(ordinal, index):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
322 try:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
323 threat = get_vuln(ordinal)._threats[index]
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
324 except IndexError:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
325 abort(404)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
326 if request.method != 'POST':
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
327 return render_template('vulnerability/edit_threat.j2',
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
328 ordinal=ordinal, index=index,
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
329 type=threat._type, date=threat._date, description=threat._description, productids=threat._productids, groupids=threat._groupids,
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
330 types=threat.TYPES, groups=get_groups(), now=utcnow())
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
331
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
332 threat._type = request.form['type']
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
333 threat._description = request.form['description']
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
334 date = None
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
335 if request.form['date']:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
336 date = parseDate(request.form['date'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
337 threat.setDate(date)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
338 threat._productids = []
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
339 threat._groupids = []
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
340 for productid in request.form.getlist('products'):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
341 threat.addProductID(productid)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
342 for groupid in request.form.getlist('groups'):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
343 threat.addGroupID(groupid)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
344 return redirect(url_for('.view', ordinal=ordinal))
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
345
93
8e72f31d7392 Add deletion of Threats
Benoît Allard <benoit.allard@greenbone.net>
parents: 92
diff changeset
346 @vulnerability.route('/<int:ordinal>/threat/<int:index>/del', methods=['POST'])
8e72f31d7392 Add deletion of Threats
Benoît Allard <benoit.allard@greenbone.net>
parents: 92
diff changeset
347 @document_required
8e72f31d7392 Add deletion of Threats
Benoît Allard <benoit.allard@greenbone.net>
parents: 92
diff changeset
348 def del_threat(ordinal, index):
8e72f31d7392 Add deletion of Threats
Benoît Allard <benoit.allard@greenbone.net>
parents: 92
diff changeset
349 threats = get_vuln(ordinal)._threats
8e72f31d7392 Add deletion of Threats
Benoît Allard <benoit.allard@greenbone.net>
parents: 92
diff changeset
350 if not (0 <= index < len(threats)):
8e72f31d7392 Add deletion of Threats
Benoît Allard <benoit.allard@greenbone.net>
parents: 92
diff changeset
351 flash('Threat not found', 'danger')
8e72f31d7392 Add deletion of Threats
Benoît Allard <benoit.allard@greenbone.net>
parents: 92
diff changeset
352 abort(404)
8e72f31d7392 Add deletion of Threats
Benoît Allard <benoit.allard@greenbone.net>
parents: 92
diff changeset
353
8e72f31d7392 Add deletion of Threats
Benoît Allard <benoit.allard@greenbone.net>
parents: 92
diff changeset
354 del threats[index]
8e72f31d7392 Add deletion of Threats
Benoît Allard <benoit.allard@greenbone.net>
parents: 92
diff changeset
355 return redirect(url_for('.view', ordinal=ordinal))
8e72f31d7392 Add deletion of Threats
Benoît Allard <benoit.allard@greenbone.net>
parents: 92
diff changeset
356
0
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
357
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
358 @vulnerability.route('/<int:ordinal>/cvss/<int:index>')
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
359 @document_required
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
360 def view_cvss(ordinal, index):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
361 try:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
362 cvss = get_vuln(ordinal)._cvsss[index]
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
363 except IndexError:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
364 abort(404)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
365 return render_template('vulnerability/view_cvss.j2', ordinal=ordinal, index=index, cvss=cvss, cvrf=get_current())
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
366
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
367 @vulnerability.route('/<int:ordinal>/cvss/add', methods=['GET', 'POST'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
368 @document_required
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
369 def add_cvss(ordinal):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
370 if request.method != 'POST':
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
371 return render_template('vulnerability/edit_cvss.j2', ordinal=ordinal, action='Add')
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
372
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
373 cvss = CVRFCVSSSet(float(request.form['basescore']))
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
374 tscore = None
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
375 if request.form['temporalscore']:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
376 tscore = float(request.form['temporalscore'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
377 cvss.setTemporalScore(tscore)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
378 escore = None
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
379 if request.form['environmentalscore']:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
380 escore = float(request.form['environmentalscore'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
381 cvss.setEnvironmentalScore(escore)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
382 cvss.setVector(request.form['vector'] or None)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
383 get_vuln(ordinal).addCVSSSet(cvss)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
384 return redirect(url_for('.view', ordinal=ordinal))
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
385
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
386 @vulnerability.route('/<int:ordinal>/cvss/<int:index>/edit', methods=['GET', 'POST'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
387 @document_required
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
388 def edit_cvss(ordinal, index):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
389 try:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
390 cvss = get_vuln(ordinal)._cvsss[index]
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
391 except IndexError:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
392 abort(404)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
393 if request.method != 'POST':
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
394 return render_template('vulnerability/edit_cvss.j2',
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
395 ordinal=ordinal, index=index,
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
396 basescore=cvss._basescore, temporalscore=cvss._temporalscore, environmentalscore=cvss._environmentalscore, vector=cvss._vector)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
397
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
398 cvss._basescore = float(request.form['basescore'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
399 tscore = None
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
400 if request.form['temporalscore']:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
401 tscore = float(request.form['temporalscore'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
402 cvss.setTemporalScore(tscore)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
403 escore = None
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
404 if request.form['environmentalscore']:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
405 escore = float(request.form['environmentalscore'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
406 cvss.setEnvironmentalScore(escore)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
407 cvss.setVector(request.form['vector'] or None)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
408 return redirect(url_for('.view', ordinal=ordinal))
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
409
94
1ca989387aeb Add deletion of CVSS
Benoît Allard <benoit.allard@greenbone.net>
parents: 93
diff changeset
410 @vulnerability.route('/<int:ordinal>/cvss/<int:index>/del', methods=['POST'])
1ca989387aeb Add deletion of CVSS
Benoît Allard <benoit.allard@greenbone.net>
parents: 93
diff changeset
411 @document_required
1ca989387aeb Add deletion of CVSS
Benoît Allard <benoit.allard@greenbone.net>
parents: 93
diff changeset
412 def del_cvss(ordinal, index):
1ca989387aeb Add deletion of CVSS
Benoît Allard <benoit.allard@greenbone.net>
parents: 93
diff changeset
413 cvsss = get_vuln(ordinal)._cvsss
1ca989387aeb Add deletion of CVSS
Benoît Allard <benoit.allard@greenbone.net>
parents: 93
diff changeset
414 if not ( 0 <= index < len(cvsss)):
1ca989387aeb Add deletion of CVSS
Benoît Allard <benoit.allard@greenbone.net>
parents: 93
diff changeset
415 flash('CVSS not found', 'danger')
1ca989387aeb Add deletion of CVSS
Benoît Allard <benoit.allard@greenbone.net>
parents: 93
diff changeset
416 abort(404)
1ca989387aeb Add deletion of CVSS
Benoît Allard <benoit.allard@greenbone.net>
parents: 93
diff changeset
417
1ca989387aeb Add deletion of CVSS
Benoît Allard <benoit.allard@greenbone.net>
parents: 93
diff changeset
418 del cvsss[index]
1ca989387aeb Add deletion of CVSS
Benoît Allard <benoit.allard@greenbone.net>
parents: 93
diff changeset
419 return redirect(url_for('.view', ordinal=ordinal))
1ca989387aeb Add deletion of CVSS
Benoît Allard <benoit.allard@greenbone.net>
parents: 93
diff changeset
420
0
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
421
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
422 @vulnerability.route('/<int:ordinal>/remediation/<int:index>')
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
423 @document_required
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
424 def view_remediation(ordinal, index):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
425 try:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
426 remediation = get_vuln(ordinal)._remediations[index]
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
427 except IndexError:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
428 abort(404)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
429 return render_template('vulnerability/view_remediation.j2',
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
430 ordinal=ordinal, index=index,
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
431 remediation=remediation,
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
432 cvrf=get_current())
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
433
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
434 @vulnerability.route('/<int:ordinal>/remediation/add', methods=['GET', 'POST'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
435 @document_required
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
436 def add_remediation(ordinal):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
437 if request.method != 'POST':
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
438 return render_template('vulnerability/edit_remediation.j2',
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
439 ordinal=ordinal,
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
440 types=CVRFRemediation.TYPES, groups=get_groups(), now=utcnow(),
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
441 action='Add')
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
442
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
443 remediation = CVRFRemediation(request.form['type'], request.form['description'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
444 if request.form['date']:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
445 remediation.setDate(parseDate(request.form['date']))
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
446 if request.form['entitlement']:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
447 remediation.setEntitlement(request.form['entitlement'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
448 if request.form['url']:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
449 remediation.setURL(request.form['url'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
450 for productid in request.form.getlist('products'):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
451 remediation.addProductID(productid)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
452 for groupid in request.form.getlist('groups'):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
453 remediation.addGroupID(groupid)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
454 get_vuln(ordinal).addRemediation(remediation)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
455 return redirect(url_for('.view', ordinal=ordinal))
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
456
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
457 @vulnerability.route('/<int:ordinal>/remediation/<int:index>/edit', methods=['GET', 'POST'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
458 @document_required
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
459 def edit_remediation(ordinal, index):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
460 try:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
461 remediation = get_vuln(ordinal)._remediations[index]
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
462 except IndexError:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
463 abort(404)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
464 if request.method != 'POST':
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
465 return render_template('vulnerability/edit_remediation.j2',
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
466 ordinal=ordinal, index=index,
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
467 type=remediation._type, date=remediation._date, description=remediation._description, entitlement=remediation._entitlement, url=remediation._url, productids=remediation._productids, groupids=remediation._groupids,
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
468 types=remediation.TYPES, groups=get_groups(), now=utcnow())
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
469
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
470 remediation._type = request.form['type']
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
471 remediation._description = request.form['description']
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
472 date = None
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
473 if request.form['date']:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
474 date = parseDate(request.form['date'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
475 remediation.setDate(date)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
476 remediation.setEntitlement(request.form['entitlement'] or None)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
477 remediation.setURL(request.form['url'] or None)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
478 remediation._productids = []
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
479 remediation._groupids = []
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
480 for productid in request.form.getlist('products'):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
481 remediation.addProductID(productid)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
482 for groupid in request.form.getlist('groups'):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
483 remediation.addGroupID(groupid)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
484 return redirect(url_for('.view', ordinal=ordinal))
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
485
95
0b64dc3f50eb Add deletion of Remediations
Benoît Allard <benoit.allard@greenbone.net>
parents: 94
diff changeset
486 @vulnerability.route('/<int:ordinal>/remediation/<int:index>/del', methods=['POST'])
0b64dc3f50eb Add deletion of Remediations
Benoît Allard <benoit.allard@greenbone.net>
parents: 94
diff changeset
487 @document_required
0b64dc3f50eb Add deletion of Remediations
Benoît Allard <benoit.allard@greenbone.net>
parents: 94
diff changeset
488 def del_remediation(ordinal, index):
0b64dc3f50eb Add deletion of Remediations
Benoît Allard <benoit.allard@greenbone.net>
parents: 94
diff changeset
489 rems = get_vuln(ordinal)._remediations
0b64dc3f50eb Add deletion of Remediations
Benoît Allard <benoit.allard@greenbone.net>
parents: 94
diff changeset
490 if not ( 0 <= index < len(rems)):
0b64dc3f50eb Add deletion of Remediations
Benoît Allard <benoit.allard@greenbone.net>
parents: 94
diff changeset
491 flash('Remediation not found', 'danger')
0b64dc3f50eb Add deletion of Remediations
Benoît Allard <benoit.allard@greenbone.net>
parents: 94
diff changeset
492 abort(404)
0b64dc3f50eb Add deletion of Remediations
Benoît Allard <benoit.allard@greenbone.net>
parents: 94
diff changeset
493
0b64dc3f50eb Add deletion of Remediations
Benoît Allard <benoit.allard@greenbone.net>
parents: 94
diff changeset
494 del rems[index]
0b64dc3f50eb Add deletion of Remediations
Benoît Allard <benoit.allard@greenbone.net>
parents: 94
diff changeset
495 return redirect(url_for('.view', ordinal=ordinal))
0b64dc3f50eb Add deletion of Remediations
Benoît Allard <benoit.allard@greenbone.net>
parents: 94
diff changeset
496
0
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
497
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
498 @vulnerability.route('/<int:ordinal>/reference/<int:index>/edit', methods=['GET', 'POST'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
499 @document_required
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
500 def edit_reference(ordinal, index):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
501 try:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
502 reference = get_vuln(ordinal)._references[index]
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
503 except IndexError:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
504 abort(404)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
505 if request.method != 'POST':
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
506 return render_template('vulnerability/edit_reference.j2', ordinal=ordinal, _type=reference._type, url=reference._url, description=reference._description, types=('',) + reference.TYPES)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
507
61
55b72057b066 Unify reference update/creation from forms
Benoît Allard <benoit.allard@greenbone.net>
parents: 60
diff changeset
508 update_reference_from_request(reference)
0
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
509 return redirect(url_for('.view', ordinal=ordinal))
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
510
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
511 @vulnerability.route('/<int:ordinal>/reference/add', methods=['GET', 'POST'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
512 @document_required
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
513 def add_reference(ordinal):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
514 if request.method != 'POST':
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
515 return render_template('vulnerability/edit_reference.j2', action='Add', ordinal=ordinal, types=('',) + CVRFReference.TYPES)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
516
61
55b72057b066 Unify reference update/creation from forms
Benoît Allard <benoit.allard@greenbone.net>
parents: 60
diff changeset
517 ref = create_reference_from_request()
0
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
518 get_vuln(ordinal).addReference(ref)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
519 return redirect(url_for('.view', ordinal=ordinal))
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
520
96
3848faa88cd5 Add deletion of Vulnerability's References
Benoît Allard <benoit.allard@greenbone.net>
parents: 95
diff changeset
521 @vulnerability.route('/<int:ordinal>/reference/<int:index>/del', methods=['POST'])
3848faa88cd5 Add deletion of Vulnerability's References
Benoît Allard <benoit.allard@greenbone.net>
parents: 95
diff changeset
522 @document_required
3848faa88cd5 Add deletion of Vulnerability's References
Benoît Allard <benoit.allard@greenbone.net>
parents: 95
diff changeset
523 def del_reference(ordinal, index):
3848faa88cd5 Add deletion of Vulnerability's References
Benoît Allard <benoit.allard@greenbone.net>
parents: 95
diff changeset
524 refs = get_vuln(ordinal)._references
3848faa88cd5 Add deletion of Vulnerability's References
Benoît Allard <benoit.allard@greenbone.net>
parents: 95
diff changeset
525 if not ( 0 <= index < len(refs)):
3848faa88cd5 Add deletion of Vulnerability's References
Benoît Allard <benoit.allard@greenbone.net>
parents: 95
diff changeset
526 flash('Reference not found', 'danger')
3848faa88cd5 Add deletion of Vulnerability's References
Benoît Allard <benoit.allard@greenbone.net>
parents: 95
diff changeset
527 abort(404)
3848faa88cd5 Add deletion of Vulnerability's References
Benoît Allard <benoit.allard@greenbone.net>
parents: 95
diff changeset
528
3848faa88cd5 Add deletion of Vulnerability's References
Benoît Allard <benoit.allard@greenbone.net>
parents: 95
diff changeset
529 del refs[index]
3848faa88cd5 Add deletion of Vulnerability's References
Benoît Allard <benoit.allard@greenbone.net>
parents: 95
diff changeset
530 return redirect(url_for('.view', ordinal=ordinal))
3848faa88cd5 Add deletion of Vulnerability's References
Benoît Allard <benoit.allard@greenbone.net>
parents: 95
diff changeset
531
0
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
532
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
533 @vulnerability.route('/<int:ordinal>/acknowledgment/<int:index>')
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
534 @document_required
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
535 def view_acknowledgment(ordinal, index):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
536 try:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
537 ack = get_vuln(ordinal)._acknowledgments[index]
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
538 except IndexError:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
539 abort(404)
64
aad7db3f93b6 Add support for Acknowledgments with multiple names and organizations
Benoît Allard <benoit.allard@greenbone.net>
parents: 62
diff changeset
540 return render_template('vulnerability/view_acknowledgment.j2',
aad7db3f93b6 Add support for Acknowledgments with multiple names and organizations
Benoît Allard <benoit.allard@greenbone.net>
parents: 62
diff changeset
541 ordinal=ordinal,
aad7db3f93b6 Add support for Acknowledgments with multiple names and organizations
Benoît Allard <benoit.allard@greenbone.net>
parents: 62
diff changeset
542 acknowledgment=ack, index=index,
aad7db3f93b6 Add support for Acknowledgments with multiple names and organizations
Benoît Allard <benoit.allard@greenbone.net>
parents: 62
diff changeset
543 action='Update')
0
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
544
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
545 @vulnerability.route('/<int:ordinal>/acknowledgment/<int:index>/edit', methods=['GET', 'POST'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
546 @document_required
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
547 def edit_acknowledgment(ordinal, index):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
548 try:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
549 ack = get_vuln(ordinal)._acknowledgments[index]
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
550 except IndexError:
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
551 abort(404)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
552 if request.method != 'POST':
64
aad7db3f93b6 Add support for Acknowledgments with multiple names and organizations
Benoît Allard <benoit.allard@greenbone.net>
parents: 62
diff changeset
553 return render_template('vulnerability/edit_acknowledgment.j2',
aad7db3f93b6 Add support for Acknowledgments with multiple names and organizations
Benoît Allard <benoit.allard@greenbone.net>
parents: 62
diff changeset
554 ordinal=ordinal,
aad7db3f93b6 Add support for Acknowledgments with multiple names and organizations
Benoît Allard <benoit.allard@greenbone.net>
parents: 62
diff changeset
555 names=ack._names, organizations=ack._organizations,
aad7db3f93b6 Add support for Acknowledgments with multiple names and organizations
Benoît Allard <benoit.allard@greenbone.net>
parents: 62
diff changeset
556 description=ack._description, url=ack._url,
aad7db3f93b6 Add support for Acknowledgments with multiple names and organizations
Benoît Allard <benoit.allard@greenbone.net>
parents: 62
diff changeset
557 action='Update')
0
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
558
60
c6e7175ff28c Unify acknowledgments update/creation from forms
Benoît Allard <benoit.allard@greenbone.net>
parents: 59
diff changeset
559 update_acknowledgment_from_request(ack)
0
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
560 return redirect(url_for('.view', ordinal=ordinal))
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
561
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
562 @vulnerability.route('/<int:ordinal>/acknowledgment/add', methods=['GET', 'POST'])
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
563 @document_required
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
564 def add_acknowledgment(ordinal):
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
565 if request.method != 'POST':
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
566 return render_template('vulnerability/edit_acknowledgment.j2', action='Add', ordinal=ordinal)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
567
60
c6e7175ff28c Unify acknowledgments update/creation from forms
Benoît Allard <benoit.allard@greenbone.net>
parents: 59
diff changeset
568 ack = create_acknowledgment_from_request()
0
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
569 get_vuln(ordinal).addAcknowledgment(ack)
4a9f23230eba Initial Release
Benoît Allard <benoit.allard@greenbone.net>
parents:
diff changeset
570 return redirect(url_for('.view', ordinal=ordinal))
97
4ec281e68821 Add deletion of Vulnerability's Acknowledgments
Benoît Allard <benoit.allard@greenbone.net>
parents: 96
diff changeset
571
4ec281e68821 Add deletion of Vulnerability's Acknowledgments
Benoît Allard <benoit.allard@greenbone.net>
parents: 96
diff changeset
572 @vulnerability.route('/<int:ordinal>/acknowledgment/<int:index>/del', methods=['POST'])
4ec281e68821 Add deletion of Vulnerability's Acknowledgments
Benoît Allard <benoit.allard@greenbone.net>
parents: 96
diff changeset
573 @document_required
4ec281e68821 Add deletion of Vulnerability's Acknowledgments
Benoît Allard <benoit.allard@greenbone.net>
parents: 96
diff changeset
574 def del_acknowledgment(ordinal, index):
4ec281e68821 Add deletion of Vulnerability's Acknowledgments
Benoît Allard <benoit.allard@greenbone.net>
parents: 96
diff changeset
575 acks = get_vuln(ordinal)._acknowledgments
4ec281e68821 Add deletion of Vulnerability's Acknowledgments
Benoît Allard <benoit.allard@greenbone.net>
parents: 96
diff changeset
576 if not( 0 <= index < len(acks)):
4ec281e68821 Add deletion of Vulnerability's Acknowledgments
Benoît Allard <benoit.allard@greenbone.net>
parents: 96
diff changeset
577 flash('Acknowledgment not found', 'danger')
4ec281e68821 Add deletion of Vulnerability's Acknowledgments
Benoît Allard <benoit.allard@greenbone.net>
parents: 96
diff changeset
578 abort(404)
4ec281e68821 Add deletion of Vulnerability's Acknowledgments
Benoît Allard <benoit.allard@greenbone.net>
parents: 96
diff changeset
579
4ec281e68821 Add deletion of Vulnerability's Acknowledgments
Benoît Allard <benoit.allard@greenbone.net>
parents: 96
diff changeset
580 del acks[index]
4ec281e68821 Add deletion of Vulnerability's Acknowledgments
Benoît Allard <benoit.allard@greenbone.net>
parents: 96
diff changeset
581 return redirect(url_for('.view', ordinal=ordinal))

http://farol.wald.intevation.org