Merge branch 'main' into revert-778-fix/OXO-should-exit-once-the-scan…

…-has-completed
Ostorlab · Aug 15, 2024 · 1e4c63e · 1e4c63e
2 parents 12c4c54 + 8205b10
commit 1e4c63e
Show file tree

Hide file tree

Showing 5 changed files with 1,246 additions and 27 deletions.
diff --git a/setup.cfg b/setup.cfg
@@ -13,7 +13,7 @@ license_files = LICENSE
 long_description = file: README.md
 long_description_content_type = text/markdown
 url = https://github.com/Ostorlab/ostorlab
-version=1.1.1
+version=1.1.2
 project_urls =
     Documentation = https://oxo.ostorlab.co/
     Source = https://github.com/Ostorlab/oxo

diff --git a/src/ostorlab/agent/kb/KB b/src/ostorlab/agent/kb/KB
diff --git a/src/ostorlab/agent/message/proto/v3/report/cve/cve.proto b/src/ostorlab/agent/message/proto/v3/report/cve/cve.proto
@@ -17,6 +17,7 @@ message CVSS {
     optional CVSSv3 v31 = 1;
     optional CVSSv3 v30 = 2;
     optional CVSSv2 v2 = 3;
+    optional CVSSv4 v40 = 4;
 }
 
 message CVSSv2 {
@@ -83,6 +84,45 @@ message CVSSv3 {
     optional float exploitability_score = 32;
 }    
 
+message CVSSv4 {
+    optional string version = 1;
+    optional string vector_string = 2;
+    optional float base_score = 3;
+    optional string base_severity = 4;
+    optional string attack_vector = 5;
+    optional string attack_complexity = 6;
+    optional string attack_requirements = 7;
+    optional string privileges_required = 8;
+    optional string user_interaction = 9;
+    optional string vulnerable_system_confidentiality = 10;
+    optional string vulnerable_system_integrity = 11;
+    optional string vulnerable_system_availability = 12;
+    optional string subsequent_system_confidentiality = 13;
+    optional string subsequent_system_integrity = 14;
+    optional string subsequent_system_availability = 15;
+    optional string exploit_maturity = 16;
+    optional string confidentiality_requirements = 17;
+    optional string integrity_requirements = 18;
+    optional string availability_requirements = 19;
+    optional string modified_attack_vector = 20;
+    optional string modified_attack_complexity = 21;
+    optional string modified_attack_requirements = 22;
+    optional string modified_privileges_required = 23;
+    optional string modified_user_interaction = 24;
+    optional string modified_vulnerable_system_confidentiality = 25;
+    optional string modified_vulnerable_system_integrity = 26;
+    optional string modified_vulnerable_system_availability = 27;
+    optional string modified_subsequent_system_confidentiality = 28;
+    optional string modified_subsequent_system_integrity = 29;
+    optional string modified_subsequent_system_availability = 30;
+    optional string safety = 31;
+    optional string automatable = 32;
+    optional string recovery = 33;
+    optional string value_density = 34;
+    optional string vulnerability_response_effort = 35;
+    optional string provider_urgency = 36;
+}
+
 
 
 message Reference {
+3 −3		MOBILE_CLIENT/ANDROID/_MEDIUM/INSECURE_REGISTER_RECEIVER_FLAG/description.md
+2 −2		MOBILE_CLIENT/ANDROID/_MEDIUM/INSECURE_REGISTER_RECEIVER_FLAG/recommendation.md