Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

It is not possible to activate the "National Vulnerability Database" option #1576

Closed
luidoc opened this issue Apr 29, 2022 · 3 comments
Closed
Labels
duplicate This issue or pull request already exists pending release
Milestone

Comments

@luidoc
Copy link

luidoc commented Apr 29, 2022

Current Behavior:

When I disable the "Enable National Vulnerability Database mirroring" option within Administration->Vulnerability Sources->National Vulnerability Database, if I subsequently try to check the option again by setting the url to "https://nvd.nist.gov/feeds" and pressing the update button, the change is not made. When re-entering this menu option the changes do not appear.

Steps to Reproduce:

Go to the "National Vulnerability Database" option in the Administration->Vulnerability Sources menu.
Uncheck the "Enable National Vulnerability Database mirroring" checkbox, click the "Update" button.
Navigate to any other menu option.

Return to the "National Vulnerability Database" option in the Administration->Vulnerability Sources menu. Check that the check is unchecked and the "NVD Feeds URL" field has no value.
Mark the check "Enable National Vulnerability Database mirroring", write in the "NVD Feeds URL" field the url "https://nvd.nist.gov/feeds" and press the "Update" button.
Navigate to any other menu option.

Return to the "National Vulnerability Database" option in the Administration->Vulnerability Sources menu. It is verified that the check is unchecked again and the "NVD Feeds URL" field has no value.

Expected Behavior:

It is expected that by checking the "Enable National Vulnerability Database mirroring" checkbox, typing a url in the "NVD Feeds URL" field and clicking the "Update" button, the changes will be saved and remain.

Environment:

  • Dependency-Track Version: 4.4.2
  • Distribution: Docker
  • Database Server: MSSQL

Additional Details:

When you press the update button, using the "Developer tools" of the browser, you can verify that this message is always sent in the post petition:
[{"groupName":"vuln-source","propertyName":"nvd.enabled","propertyValue":null},{"groupName":"vuln-source","propertyName":"nvd.feeds.url ","propertyValue":null}]
when it should be:
[{"groupName":"vuln-source","propertyName":"nvd.enabled","propertyValue":true},{"groupName":"vuln-source","propertyName":"nvd.feeds.url","propertyValue":"https://nvd.nist.gov/feeds"}]

If you run this call with curl, the changes are made:
curl --location --request POST 'https://url-api/api/v1/configProperty/aggregate'
--header 'Authorization: Bearer xxxxxx'
--header 'Content-Type: application/json'
--data-raw '[{"groupName":"vuln-source","propertyName":"nvd.enabled","propertyValue":true},{"groupName":"vuln-source","propertyName":"nvd.feeds.url","propertyValue":"https://nvd.nist.gov/feeds"}]'

@stevespringett
Copy link
Member

Duplicate of DependencyTrack/frontend#137

@nscuro
Copy link
Member

nscuro commented Apr 29, 2022

Fixed in DependencyTrack/frontend#143.

@nscuro nscuro added this to the 4.5 milestone Apr 29, 2022
@github-actions
Copy link
Contributor

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Jun 12, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
duplicate This issue or pull request already exists pending release
Projects
None yet
Development

No branches or pull requests

3 participants