Adding range filters for EPSS

[hblankenship]

Added EPSS score and percentile range filters. You can set the values to the same number for exact matches.

[sc-7760]

[dryrunsecurity]

DryRun Security Summary

The pull request enhances Defect Dojo's filtering capabilities by introducing a PercentageRangeFilter and several specialized filter classes to provide security teams with more granular control over identifying, prioritizing, and managing vulnerabilities.

Expand for full summary

Summary:

The changes made in this pull request appear to be focused on enhancing the filtering capabilities of the Defect Dojo application. The key changes include the addition of a new PercentageRangeFilter class, which allows for filtering on a range of percentage values, such as EPSS score and percentile. Additionally, several specialized filter classes have been introduced, including filters for accepted findings, similar findings, and metrics-related findings. These changes are likely aimed at providing security teams with more granular control over the way they identify, prioritize, and manage vulnerabilities within the application.

From an application security perspective, the addition of the PercentageRangeFilter is particularly interesting, as it could enable security analysts to more effectively identify findings with a high EPSS score or percentile, which may indicate a higher risk. The specialized filters for accepted findings, similar findings, and metrics-related findings could also be useful for security teams to better understand the risk profile of the application and focus their efforts on the most critical issues.

Files Changed:

• dojo/filters.py: This file contains various filter classes used in the Defect Dojo application. The changes include:
  • Addition of a new PercentageRangeFilter class, which allows filtering on a range of percentage values.
  • Updates to the ApiFindingFilter, FindingFilterHelper, and TemplateFindingFilter classes to include the new PercentageRangeFilter.
  • Addition of new specialized filter classes, such as FindingFilterWithoutObjectLookups, AcceptedFindingFilter, SimilarFindingFilter, ApiTemplateFindingFilter, MetricsFindingFilter, and MetricsEndpointFilter.
  • Modifications to existing filter classes to include new filtering options and functionality.

These changes are aimed at improving the filtering capabilities of the Defect Dojo application, which can be a valuable tool for security teams to manage and prioritize vulnerabilities within their applications.

Code Analysis

We ran 9 analyzers against 1 file and 0 analyzers had findings. 9 analyzers had no findings.

View PR in the DryRun Dashboard.

[mtesauro]

Approved