Skip to content

URL encoding issue for Vulnerability IDs #1097

@KS-DR

Description

@KS-DR

Current Behavior

If one creates a vulnerability and uses special characters like "/" or "?" in the Vulnerability ID (e.g. TEST/ID), the vulnerability can't be reached afterwards, because the special characters are not properly encoded in the URL.

Steps to Reproduce

  1. Go to {Your-DT-URL}/vulnerabilities
  2. Click on "+ Create Vulnerability"
  3. As Vulnerability ID insert "TEST/0815-Vuln"
  4. Fill out the remaining form and click "Create"
  5. Get 404-Error

Expected Behavior

Vulnerability IDs should be encoded correctly, so that vulnerabilities can be reached after creation, even if special characters like / exist in the ID.

Dependency-Track Version

4.12.1

Dependency-Track Distribution

Container Image

Database Server

PostgreSQL

Database Server Version

14.7

Browser

Microsoft Edge

Checklist

Metadata

Metadata

Assignees

No one assigned

    Labels

    defectSomething isn't workingp2Non-critical bugs, and features that help organizations to identify and reduce risksize/SSmall effort

    Type

    No type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions