Severity (#1160)

artemis/reporting/base/report.py

@@ -6,6 +6,7 @@
 from typing import Any, Dict, List, Optional
 
 from artemis.domains import is_domain
+from artemis.reporting.severity import Severity
 from artemis.resolvers import ResolutionException, lookup
 from artemis.utils import get_host_from_url, is_ip_address
 
@@ -57,6 +58,9 @@ class Report:
     original_task_result_root_uid: Optional[str] = None
     original_task_target_string: Optional[str] = None
 
+    # The severity (added during report post-processing)
+    severity: Optional[Severity] = None
+
     def __post_init__(self) -> None:
         # Sanity check - at this moment, only URLs and domains are supported
         assert self.target_is_url() or self.target_is_domain()

artemis/reporting/export/db.py

@@ -11,6 +11,7 @@
 from artemis.reporting.base.language import Language
 from artemis.reporting.base.report import Report
 from artemis.reporting.base.reporters import reports_from_task_result
+from artemis.reporting.severity import get_severity
 from artemis.reporting.utils import get_top_level_target
 from artemis.task_utils import get_target_host
 
@@ -78,6 +79,7 @@ def _initialize_data_if_needed(self) -> None:
                 report_to_add.original_task_result_id = result["id"]
                 report_to_add.original_task_result_root_uid = result["analysis_id"]
                 report_to_add.original_task_target_string = result["target_string"]
+                report_to_add.severity = get_severity(report_to_add)
                 report_to_add.last_domain = result["task"]["payload"].get("last_domain", None)
 
             self._reports.extend(blocklist_reports(reports_to_add, self._blocklist))

artemis/reporting/modules/nuclei/reporter.py

@@ -157,6 +157,7 @@ def _is_url_without_query_fragment(url: str) -> bool:
                                 template, description, language
                             ),
                             "reference": vulnerability["info"].get("reference", []),
+                            "severity": vulnerability["info"]["severity"],
                             "matched_at": matched_at,
                             "template_name": template,
                             "original_template_name": original_template_name,

artemis/reporting/severity.py

@@ -1,5 +1,6 @@
 import json
 from enum import Enum
+from typing import Any
 
 from artemis.config import Config
 from artemis.reporting.base.report_type import ReportType
@@ -71,3 +72,18 @@ class Severity(str, Enum):
         additional = json.load(f)
     for report_type_str, severity in additional.items():
         SEVERITY_MAP[ReportType(report_type_str)] = Severity(severity)
+
+
+def get_severity(report: Any) -> Severity:
+    if report.report_type == ReportType("nuclei_vulnerability") and "severity" in report.additional_data:
+        nuclei_severity_map = {
+            "info": Severity.LOW,
+            "low": Severity.LOW,
+            "medium": Severity.MEDIUM,
+            "high": Severity.HIGH,
+            "critical": Severity.HIGH,
+        }
+
+        return nuclei_severity_map[report.additional_data["severity"]]
+    else:
+        return SEVERITY_MAP[report.report_type]