-
Notifications
You must be signed in to change notification settings - Fork 3.2k
Closed
Description
Is there an existing issue for this?
- I have searched the existing issues and discussions.
Enhancement Description
It would be helpful if every template had a description that explains what a finding from the template represents.
Use Case / Problem
Currently some templates do not have a description, and when a template that does not have a description produces a match against a target, I do not have enough context to understand what the finding represents, making it hard for me to understand the underlying vulnerability.
Proposed Solution
This is a good use case for leveraging generative AI to populate the description field for all templates that are currently missing a description:
code/privilege-escalation/linux/rw-shadow.yaml
code/privilege-escalation/linux/rw-sudoers.yaml
code/privilege-escalation/linux/writable-etc-passwd.yaml
dast/vulnerabilities/cmdi/python-code-injection.yaml
dast/vulnerabilities/crlf/cookie-injection.yaml
dast/vulnerabilities/crlf/crlf-injection.yaml
dast/vulnerabilities/lfi/lfi-keyed.yaml
# and 1500 other templates
Alternatives Considered
N/A
Additional Context
N/A
Metadata
Metadata
Assignees
Labels
No labels