Follow-up from "Draft: Submit vulnerability form"
The following discussion from !78703 (merged) should be addressed:
-
@svedova started a discussion: (+1 comment) A few issues I have noted about the backend:
- When the identifiers property is an empty array
[]
the query returns 500 internal server error. - When I submit with the same identifier I receive a
Vulnerability with those details already exists
error - When I submit an empty title the backend validates it and returns a proper error message. However, for severity and status fields GraphQL complains about inputs being required. This is an error message that we cannot show to the user. This behaviour is not consistent.
- There is no field to store the detection method.
-
The created vulnerability is not shown in the Vulnerability Report but is reachable through the URL.resolved via #353176 (closed)
/cc @Quintasan
- When the identifiers property is an empty array
Edited by Brian Williams