pwn 0.5.467 → 0.5.468

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e3a33b87844e4b90189fcd211d5b2712dd2fb68e85643af79e48b0814a67f082
-  data.tar.gz: bafa428dd2e68c076d9c33e402813d7f677530b1f10c440f99b26b1cdf2f47a5
+  metadata.gz: 5d2303b2ec4604f65e03770dcee7bed1fe067d09f57a83f2f321d63984e13dcf
+  data.tar.gz: 6de60cd7f5458ccbec56f7f3b7fc22708a467c4e3f3c26153b61a695a4238eb9
 SHA512:
-  metadata.gz: 824bb07f7116b6aeef4adcc9aa83f2c3026bfe6b7b4ff55576050af40dd423f0b7451ea4445c22d5c142efd9a72586f2cfc52cb67eb7dc7dbbfc1e35c4972960
-  data.tar.gz: 7fdd8bc18a046feaeb9b861316284277262f33f5501332368683d6a51d2bbadcbcbc432afd2bdacd640e18970a089ff94eeca3f10296f60eb832cbab9460fe59
+  metadata.gz: 2575756bd0d505f66e4e429f5eb29274f022da171107cb88cfdeb3a7dbbefc8c0ee074bb8f02226f7ceb244ddffa792c000aa940282aa15333aa582606159c33
+  data.tar.gz: 157319cff7100b366e32b9966ffe6029071c72c80d1cd7e027f91dce07c9fa0b5686bcdfae666d19e53d08e722deb57b04a41a2fff52e7ecbbe2ef3db9167b26

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.467]:001 >>> PWN.help
+pwn[v0.5.468]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.4.4@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.467]:001 >>> PWN.help
+pwn[v0.5.468]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.4.4@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.467]:001 >>> PWN.help
+pwn[v0.5.468]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/lib/pwn/plugins/jira_data_center.rb

@@ -405,10 +405,11 @@ module PWN
             rest_call: "issue/createmeta/#{project_key}/issuetypes/#{issue_type_id}",
             params: params
           )
-          max_results = this_resp[:maxResults]
-          total = this_resp[:total]
-          is_last = this_resp[:isLast]
-          response[:values].push(this_resp[:values])
+          response[:maxResults] = this_resp[:maxResults]
+          response[:startAt] = this_resp[:startAt]
+          response[:total] = this_resp[:total]
+          response[:isLast] = this_resp[:isLast]
+          response[:values].concat(this_resp[:values])
           break if is_last
 
           start_at += max_results
@@ -432,40 +433,68 @@ module PWN
 
         project_key = issue_data[:fields][:project][:key]
         summary = "CLONE - #{issue_data[:fields][:summary]}"
-
-        issue_type = issue_data[:fields][:issuetype][:name].downcase.to_sym
-        issue_type_id = issue_data[:fields][:issuetype][:id]
-
-        reject_keys = %i[
-          project
-          summary
-          issuetype
-          description
-          created
-          updated
-          resolution
-          status
-          resolutiondate
-          environment
-          comment
-          attachment
-        ]
-
         epic_name = nil
         epic_name_field_key = nil
         if issue_type == :epic
           all_fields = get_all_fields
           epic_name_field_key = all_fields.find { |field| field[:name] == 'Epic Name' }[:id]
           epic_name = issue_data[:fields][epic_name_field_key.to_sym]
-          reject_keys << epic_name_field_key.to_sym
         end
 
         description = issue_data[:fields][:description]
 
-        clone_fields = issue_data[:fields].dup
-        clone_fields.reject! { |key, value| reject_keys.include?(key) || value.nil? }
+        # Determine issue type (was previously missing) and create metadata
+        issue_type = issue_data[:fields][:issuetype][:name].downcase.to_sym
+        issue_type_id = issue_data[:fields][:issuetype][:id]
+
+        meta = get_issue_type_metadata(
+          project_key: project_key,
+          issue_type_id: issue_type_id
+        )
+        candidate_array = meta[:values] ||= []
+
+        # Build list of fields we can 'set' on create (per create metadata)
+        allowed_fields = []
+        candidate_array.each do |field_obj|
+          next unless field_obj.is_a?(Hash)
+
+          ops = field_obj[:operations] ||= []
+          next unless ops.include?('set')
+
+          field_key = field_obj[:key] || field_obj[:id] || field_obj[:fieldId]
+          next if field_key.nil? || field_key.to_s.empty?
+
+          allowed_fields.push(field_key.to_s)
+        end
+
+        reserved_fields = %i[project summary issuetype description]
+        reserved_fields.push(epic_name_field_key.to_sym) if epic_name_field_key
+
+        filtered_fields = {}
+        issue_data[:fields].each do |k, v|
+          next if v.nil?
+
+          k_str = k.to_s
+          next if reserved_fields.include?(k) || reserved_fields.include?(k_str.to_sym)
+
+          next unless allowed_fields.include?(k_str)
+
+          case v
+          when Array
+            filtered_fields[k] = v.map { |elem| elem.is_a?(Hash) ? elem.slice(*%i[id key name value]) : elem }
+          when Hash
+            filtered_fields[k] =
+              if v.keys.any? { |kk| %i[id key name value].include?(kk) }
+                v.slice(*%i[id key name value])
+              else
+                v
+              end
+          else
+            filtered_fields[k] = v
+          end
+        end
 
-        additional_fields = { fields: clone_fields }
+        additional_fields = { fields: filtered_fields }
 
         create_issue(
           project_key: project_key,

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.467'
+  VERSION = '0.5.468'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.467
+  version: 0.5.468
 platform: ruby
 authors:
 - 0day Inc.