Precondition
Describe the bug
For some specific vulnerabilities, it seems that Dependency Check uses the description of the vulnerability as vulnerability name. This looks pretty strange in the logs and reports (for org.springdoc:springdoc-openapi-starter-webmvc-ui:2.8.6):
What's worse though, is that I cannot seem to suppress these vulnerabilities. Using the suppress button gives me an xml fragment with a multiline value for vulnerabilityName, which leads to parse errors at runtime, like for example:
Unable to parse suppression xml file 'suppressions.xml'
org.owasp.dependencycheck.xml.suppression.SuppressionParseException: org.xml.sax.SAXException: Line=33, Column=570: Open quote is expected for attribute "onclick" associated with an element type "img".
Version of dependency-check used
The problem occurs using version 12.2.0 of the gradle plugin.
Log file
https://gist.github.com/GunoH/ed48f53331da655658d640f07cd80932
To Reproduce
Steps to reproduce the behavior:
- Clone https://github.com/GunoH/dependency-check-suppressions.
- Run dependencyCheckAnalyze.
- Have a look at the logs and the html report.
- Add suppression using xml fragment from suppress button.
- Run dependencyCheckAnalyze again.
Expected behavior
- Vulnerability name concise instead of unbounded
- The suppress button gives me usable xml
Precondition
Describe the bug
For some specific vulnerabilities, it seems that Dependency Check uses the description of the vulnerability as vulnerability name. This looks pretty strange in the logs and reports (for
org.springdoc:springdoc-openapi-starter-webmvc-ui:2.8.6):What's worse though, is that I cannot seem to suppress these vulnerabilities. Using the suppress button gives me an xml fragment with a multiline value for vulnerabilityName, which leads to parse errors at runtime, like for example:
Version of dependency-check used
The problem occurs using version 12.2.0 of the gradle plugin.
Log file
https://gist.github.com/GunoH/ed48f53331da655658d640f07cd80932
To Reproduce
Steps to reproduce the behavior:
Expected behavior