Qualys Payloads

[Skuller99Dev]

Hi everyone,

I have an issue in DefectDojo when import a Qualys Web Application Scan, in te XML report from Qualys i see the value of the payload tested by Qualys but in DefectDojo these value is missing and the requests field is incomplete.

There is an example, in the first image you can see the payload in the XML report
1.

In the second image you can see one of the requests maded by Qualys whith the previous payload in the XML body tag
2.

In the third image you can see the same request imported in DefecDojo and the body tag from XML file is missing
3.

In the four imagen you can see that the steps to reproduce drop-down is empty
4.

I replicate this scenario in 2 different Ddojo versions 2.31.3 and 2.34.3, the first one in LinuxMint and the second in Ubuntu, to install and run the 2 versions i used django with docker compose v2

[manuel-sommer]

Hi @Skuller99Dev ,

could you please open up an issue and share a sample file with a short description on what values are exactly missing. Maybe these scans already help: https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/qualys_webapp. Then, I might be able to help you with a PR to resolve this issue.

[manuel-sommer]

@mtesauro, could you mark my comment above as the answer as I fixed it in a PR?

[mtesauro]

Oddly, GH won't let me.

[manuel-sommer]

weird.

[mtesauro]

Agreed

[manuel-sommer]

Ah, I guess it is because it is not from category "Q&A", but rather from Category "General". https://docs.github.com/en/discussions/managing-discussions-for-your-community/managing-categories-for-discussions#default-categories

The question is if you can switch the category. From my point of view it makes sense to "close" / "mark as answered" old topics / issues in order to have easier tracking on relevant things. But I will stick with your decision.