mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-18 12:39:28 +00:00
171 lines
3.4 KiB
JSON
171 lines
3.4 KiB
JSON
{
|
|||
|
|
"inputs_bytes": {
|
||
|
|
"froxlor_admin_ip_second_order_sqli": 15137,
|
||
|
|
"wp_gopay_log_filter_sqli": 4027
|
||
|
|
},
|
||
|
|
"rows": {
|
||
|
|
"run": 32,
|
||
|
|
"snapshot": 191,
|
||
|
|
"union": 211
|
||
|
|
},
|
||
|
|
"run": "validation-46",
|
||
|
|
"run_metrics": {
|
||
|
|
"agreed": 3,
|
||
|
|
"alerts": {
|
||
|
|
"engine:injection": {
|
||
|
|
"fixed": 6,
|
||
|
|
"fixed_in_fix_range": 0,
|
||
|
|
"vulnerable": 6
|
||
|
|
}
|
||
|
|
},
|
||
|
|
"candidates": 4,
|
||
|
|
"cases": 2,
|
||
|
|
"coverage": {
|
||
|
|
"javascript": {
|
||
|
|
"engine": 0,
|
||
|
|
"none": 0,
|
||
|
|
"quick": 4
|
||
|
|
},
|
||
|
|
"php": {
|
||
|
|
"engine": 4,
|
||
|
|
"none": 0,
|
||
|
|
"quick": 0
|
||
|
|
}
|
||
|
|
},
|
||
|
|
"declared_sites_agreed": 3,
|
||
|
|
"declared_sites_matched": 4,
|
||
|
|
"dispute_rate": {
|
||
|
|
"injection": {
|
||
|
|
"candidates": 4,
|
||
|
|
"disputed": 1,
|
||
|
|
"rate": 0.25
|
||
|
|
}
|
||
|
|
},
|
||
|
|
"disputed": 1,
|
||
|
|
"rejected": 0,
|
||
|
|
"tiebreaks": 3,
|
||
|
|
"usd": 0.10796,
|
||
|
|
"usd_per_candidate": 0.02699
|
||
|
|
},
|
||
|
|
"store_metrics": {
|
||
|
|
"agreed": 28,
|
||
|
|
"alerts": {
|
||
|
|
"c-shell-exec": {
|
||
|
|
"fixed": 2,
|
||
|
|
"fixed_in_fix_range": 0,
|
||
|
|
"vulnerable": 2
|
||
|
|
},
|
||
|
|
"c-unsafe-memory-copy": {
|
||
|
|
"fixed": 2,
|
||
|
|
"fixed_in_fix_range": 0,
|
||
|
|
"vulnerable": 2
|
||
|
|
},
|
||
|
|
"python-shell-true": {
|
||
|
|
"fixed": 1,
|
||
|
|
"fixed_in_fix_range": 0,
|
||
|
|
"vulnerable": 1
|
||
|
|
},
|
||
|
|
"python-unsafe-deserialization": {
|
||
|
|
"fixed": 8,
|
||
|
|
"fixed_in_fix_range": 0,
|
||
|
|
"vulnerable": 8
|
||
|
|
},
|
||
|
|
"python-unsafe-eval": {
|
||
|
|
"fixed": 23,
|
||
|
|
"fixed_in_fix_range": 0,
|
||
|
|
"vulnerable": 23
|
||
|
|
}
|
||
|
|
},
|
||
|
|
"candidates": 43,
|
||
|
|
"cases": 14,
|
||
|
|
"coverage": {},
|
||
|
|
"declared_sites_agreed": 16,
|
||
|
|
"declared_sites_matched": 19,
|
||
|
|
"dispute_rate": {
|
||
|
|
"injection": {
|
||
|
|
"candidates": 38,
|
||
|
|
"disputed": 5,
|
||
|
|
"rate": 0.1316
|
||
|
|
},
|
||
|
|
"untrusted_destination": {
|
||
|
|
"candidates": 5,
|
||
|
|
"disputed": 0,
|
||
|
|
"rate": 0.0
|
||
|
|
}
|
||
|
|
},
|
||
|
|
"disputed": 5,
|
||
|
|
"rejected": 10,
|
||
|
|
"tiebreaks": 10,
|
||
|
|
"usd": 0.856679,
|
||
|
|
"usd_per_candidate": 0.019923
|
||
|
|
},
|
||
|
|
"union_metrics": {
|
||
|
|
"agreed": 28,
|
||
|
|
"alerts": {
|
||
|
|
"c-shell-exec": {
|
||
|
|
"fixed": 2,
|
||
|
|
"fixed_in_fix_range": 0,
|
||
|
|
"vulnerable": 2
|
||
|
|
},
|
||
|
|
"c-unsafe-memory-copy": {
|
||
|
|
"fixed": 2,
|
||
|
|
"fixed_in_fix_range": 0,
|
||
|
|
"vulnerable": 2
|
||
|
|
},
|
||
|
|
"engine:injection": {
|
||
|
|
"fixed": 6,
|
||
|
|
"fixed_in_fix_range": 0,
|
||
|
|
"vulnerable": 6
|
||
|
|
},
|
||
|
|
"python-shell-true": {
|
||
|
|
"fixed": 1,
|
||
|
|
"fixed_in_fix_range": 0,
|
||
|
|
"vulnerable": 1
|
||
|
|
},
|
||
|
|
"python-unsafe-deserialization": {
|
||
|
|
"fixed": 8,
|
||
|
|
"fixed_in_fix_range": 0,
|
||
|
|
"vulnerable": 8
|
||
|
|
},
|
||
|
|
"python-unsafe-eval": {
|
||
|
|
"fixed": 23,
|
||
|
|
"fixed_in_fix_range": 0,
|
||
|
|
"vulnerable": 23
|
||
|
|
}
|
||
|
|
},
|
||
|
|
"candidates": 43,
|
||
|
|
"cases": 14,
|
||
|
|
"coverage": {
|
||
|
|
"javascript": {
|
||
|
|
"engine": 0,
|
||
|
|
"none": 0,
|
||
|
|
"quick": 4
|
||
|
|
},
|
||
|
|
"php": {
|
||
|
|
"engine": 4,
|
||
|
|
"none": 0,
|
||
|
|
"quick": 0
|
||
|
|
}
|
||
|
|
},
|
||
|
|
"declared_sites_agreed": 16,
|
||
|
|
"declared_sites_matched": 19,
|
||
|
|
"dispute_rate": {
|
||
|
|
"injection": {
|
||
|
|
"candidates": 38,
|
||
|
|
"disputed": 5,
|
||
|
|
"rate": 0.1316
|
||
|
|
},
|
||
|
|
"untrusted_destination": {
|
||
|
|
"candidates": 5,
|
||
|
|
"disputed": 0,
|
||
|
|
"rate": 0.0
|
||
|
|
}
|
||
|
|
},
|
||
|
|
"disputed": 5,
|
||
|
|
"rejected": 10,
|
||
|
|
"tiebreaks": 10,
|
||
|
|
"usd": 0.856679,
|
||
|
|
"usd_per_candidate": 0.019923
|
||
|
|
}
|
||
|
|
}
|