dradis-nessus 4.16.0 → 4.17.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b395234d3a5e00289f233f901709db556539beecbd6347aefeef5a15a08a7211
-  data.tar.gz: e5f896b5078c955ba59897a900ecfdb295c93f0cff274ebb6e8241d253f64074
+  metadata.gz: d1c159a4127118116cdd844aad7262f3a6441ce745b8410ba59485ffef0c1707
+  data.tar.gz: 4b8605c6b2bc8fd7ef8c5bb6fdca2fddb091de6d8e0112dfa5551184e8e82aac
 SHA512:
-  metadata.gz: 596d7a360c250a3ca2b194aeedf52ffffa4638daee27be5d43ed71e582d2344fcefe57dd6272e13992cf914b5715be7d1565c0a590bdfc878cc1a34f415c7fed
-  data.tar.gz: ae9672b62e1e0d081bb0dea57f3600fddba8e3b45a8bd5a0253f780784be5dba95b40d6cc372c1a378e9d3df31e15eac2d70485885d25585f303f9e0c22d6a4f
+  metadata.gz: 0fb92690f5447df06670d5bad373dad4b52d20aaa31e53dfe2b521dcbc8f9809ea6fb5597dc0846f00d92047ef8bd86c21c4c4aed832bb150c8ed4aa95062a96
+  data.tar.gz: 136d39fd3e9369fbb717813b08ed854aeec8c8228c4b6632fba8e1f3c1ed538a6cef332ef00d01da06a943537c0bc08f16fa9a04170b7bf7feba786901bcc1b2

data/CHANGELOG.md

@@ -1,3 +1,6 @@
+v4.17.0 (July 2025)
+- Ignore entries that have blank values
+
 v4.16.0 (May 2025)
   - No changes
 

data/lib/dradis/plugins/nessus/field_processor.rb

@@ -16,9 +16,7 @@ module Dradis
           _, name = field.split('.')
 
           if name.end_with?('entries')
-            # report_item.bid_entries
-            # report_item.cve_entries
-            # report_item.xref_entries
+            # bid_entries, cve_entries, cwe_entries, see_also_entries, xref_entries,
             entries = @nessus_object.try(name)
             if entries.any?
               entries.to_a.join("\n")

data/lib/dradis/plugins/nessus/gem_version.rb

@@ -8,7 +8,7 @@ module Dradis
 
       module VERSION
         MAJOR = 4
-        MINOR = 16
+        MINOR = 17
         TINY = 0
         PRE = nil
 

data/lib/nessus/report_item.rb

@@ -19,16 +19,16 @@ module Nessus
     def supported_tags
       [
         # attributes
-        :plugin_family, :plugin_id, :plugin_name, :port, :protocol, :svc_name, :severity, 
+        :plugin_family, :plugin_id, :plugin_name, :port, :protocol, :svc_name, :severity,
         # simple tags
-        :age_of_vuln, :cvss3_base_score, :cvss3_temporal_score, :cvss3_temporal_vector, 
-        :cvss3_vector, :cvss_base_score, :cvss3_impact_score, :cvss_temporal_score, 
-        :cvss_temporal_vector, :cvss_vector, :description, :exploit_available, 
-        :exploit_code_maturity, :exploit_framework_canvas, :exploit_framework_core, 
-        :exploitability_ease, :exploit_framework_metasploit,:metasploit_name, 
-        :patch_publication_date, :plugin_modification_date, :plugin_output, 
-        :plugin_publication_date, :plugin_type, :plugin_version, :product_coverage, 
-        :risk_factor, :solution, :synopsis, :threat_intensity_last_28, :threat_recency, 
+        :age_of_vuln, :cvss3_base_score, :cvss3_temporal_score, :cvss3_temporal_vector,
+        :cvss3_vector, :cvss_base_score, :cvss3_impact_score, :cvss_temporal_score,
+        :cvss_temporal_vector, :cvss_vector, :description, :exploit_available,
+        :exploit_code_maturity, :exploit_framework_canvas, :exploit_framework_core,
+        :exploitability_ease, :exploit_framework_metasploit,:metasploit_name,
+        :patch_publication_date, :plugin_modification_date, :plugin_output,
+        :plugin_publication_date, :plugin_type, :plugin_version, :product_coverage,
+        :risk_factor, :solution, :synopsis, :threat_intensity_last_28, :threat_recency,
         :threat_sources_last_28, :vpr_score, :vuln_publication_date,
         # multiple tags
         :bid_entries, :cve_entries, :cwe_entries, :see_also_entries, :xref_entries,
@@ -53,7 +53,7 @@ module Nessus
     # attribute, simple descendent or collection that it maps to in the XML
     # tree.
     def method_missing(method, *args)
-      
+
       # We could remove this check and return nil for any non-recognized tag.
       # The problem would be that it would make tricky to debug problems with
       # typos. For instance: <>.potr would return nil instead of raising an
@@ -102,8 +102,8 @@ module Nessus
         end
       end
 
-      # older versions of Nessus use <vpr_score> while newer versions of Nessus 
-      #   use <vulnerability_priority_rating>. This allows either tag to be 
+      # older versions of Nessus use <vpr_score> while newer versions of Nessus
+      #   use <vulnerability_priority_rating>. This allows either tag to be
       #   pulled in to the vpr_score mapping
       if method_name == 'vpr_score'
         return @xml.at_xpath('./vulnerability_priority_rating | ./vpr_score')&.text
@@ -119,7 +119,7 @@ module Nessus
       }
       method_name = translations_table.fetch(method, nil)
       if method_name
-        @xml.xpath("./#{method_name}").collect(&:text)
+        @xml.xpath("./#{method_name}").collect(&:text).reject(&:empty?)
       else
         # nothing found, the tag is valid but not present in this ReportItem
         return nil

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dradis-nessus
 version: !ruby/object:Gem::Version
-  version: 4.16.0
+  version: 4.17.0
 platform: ruby
 authors:
 - Daniel Martin
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-05-16 00:00:00.000000000 Z
+date: 2025-07-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dradis-plugins