Skip to content

OpenVAS Parser - parsing and deduplication improvments #12920

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
wants to merge 4 commits into
base: dev
Choose a base branch
from

Conversation

jostaub
Copy link
Contributor

@jostaub jostaub commented Aug 4, 2025

This changed updates the OpenVAS Parser to fix the issues described in #12378

Detailed changes:
General:

  • Updated the CSV implementation to behave more like the XML parser.
  • Introduced de-duplication using unique_id_from_tool to OpenVAS parser.
  • Increased behavior consistency between the CSV and XML parsers.
  • Combined findings where the only differences are in fields that can’t be reliably hashed due to inconsistent values between scans e.g timestamps.
  • parser now combines multiple identical findings with different endpoints into one findings with multiple endpoints

CSV Parser:

  • removed ip from description
  • added qod to description

XML Parser:

  • finding name no longer includes ip and protocol
  • parser no longer appends extra information to the description (same description behavior as csv)
  • severity now maps to cvss v3 score
  • the description xml tag now maps to reference
  • the summary inside the xml tag (part of nvt tag) now maps to description
  • impact is now included in finding
  • same qod behavior as csv parser

TODO:
[x] extract more information from xml
[] migration for OpenVAS parser
[] improve testing with better test files

@github-actions github-actions bot added settings_changes Needs changes to settings.py based on changes in settings.dist.py included in this PR unittests parser labels Aug 4, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
parser settings_changes Needs changes to settings.py based on changes in settings.dist.py included in this PR unittests
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant