[SECURITY][VULNERABILITY] ' + data.vulnerability_title + '

This is a system generated email and reply is not required. · ', '_'], ['

{
    $and: [
        {
            status: { $eq: 'Open' }
        },    
        {
            sla: { $lte: datetime('now', '-7 days') }
        }
    ]
}

"custom_fields": [
    {
         "key": "something",
         "value": "some value..."           
    }
]

"custom_fields": [
    {
         "key": "something",
         "value": "...lorem ipsum..."           
    }
]

"custom_fields": [
    {
         "key": "something",
         "value": "2021-06-03T23:15:33.008Z"           
    }
]

"custom_fields": [
    {
         "key": "something",
         "value": [
              "hello",
              "goodbye"
         ]          
    }
]

"custom_fields": [
    {
         "key": "table1",
         "value": [
              {
                   "column1": "hello",
                   "column2": "goodbye"
              },
              {
                   "column1": "goodbye",
                   "column2": "hello"
              }
         ]          
    }
]

"custom_fields": [
    {
         "key": "something",
         "value": [
              {
                   "column1": "...lorem ipsum...",
                   "column2": [
                        "hello",
                        "goodbye"
                   ]
              }
         ]          
    }
]

"custom_fields": [
    {
         "key": "something",
         "value": null           
    }
]

^xss|cross site scripting$

{$declare[CriticalInternalFindings][0]}
{$declare[HighInternalFindings][0]}
{$declare[MediumInternalFindings][0]}
{$declare[LowInternalFindings][0]}
{$declare[InfoInternalFindings][0]}
{#vulnerabilities | filterBy:’AffectedAssetCustomTags’:[‘Source:Internal’]}
{#priority == ‘Critical’}{$increment[CriticalInternalFindings][1]}{/}
{#priority == ‘High’}{$increment[HighInternalFindings][1]}{/}
{#priority == ‘Medium’}{$increment[MediumInternalFindings][1]}{/}
{#priority == ‘Low’}{$increment[LowInternalFindings][1]}{/}
{#priority == ‘Info’}{$increment[InfoInternalFindings][1]}{/}
{/}

{#json}{=< >=}</><%$chart[
   {
      “type”: “bar”,
      “name”: “unique_vulns_by_priority_bar_horizontal”,
      “options”: {
         “orientation”: “horizontal”,
         “title”: “Unique Vulnerabilities”, 
         “data”: {
            “names_label”: “Priority”,
            “names”: [
	       “critical”,
	       “high”,
	       “medium”,
 	       “low”,
   	       “info”
	    ],
            “values_label”: “Vulnerabilities”,
            “values”: [
               “$(CriticalInternalFindings)”,
	       “$(HighInternalFindings)”,
	       “$(MediumInternalFindings)”,
	       “$(LowInternalFindings)”,
	       “$(InfoInternalFindings)”
	    ],
            “colors”: [
               “#7030A0”,
	       “#FF0000”,
	       “#FFC000”,
	       “#0070C0”,
	       “#00B050”
            ]
         },
         “width”: 400,
         “height”: 300
      }
   }
]><#json><={ }=>{/}

{#json}{=< >=}</><%$chart[
    {
        “type”:“stacked-bar”,
        “name”:“all_vulns”,
        “options”: {
            “data”: {
                “names_label”: “OWASP Top 10 API Security Risks 2023”,
                “names”: [
                    “API1”,
                    “API2”,
                    “API3”,
                    “API4”,
                    “API5”,
                    “API6”,
                    “API7”,
                    “API8”,
                    “API9”,
                    “API10”
                ],
                "names_font_size":15,
                “groups”: {
                    “Critical”: “#001C57”,
                    “High”: “#1F3864”,
                    “Medium”: “#2F5496”,
                    “Low”: “#8EAADB”
                },
                “values_label”: “Vulnerabilities”,
                “values”:[
                    {
                        “Critical”: “1”,
                        “High”: “4”,
                        “Medium”: “6”,
                        “Low”: “8”
                    },
                    {
                        “Critical”: “0”,
                        “High”: “0”,
                        “Medium”: “3”,
                        “Low”: “5”
                    },
                    {
                        “Critical”: “0”,
                        “High”: “0”,
                        “Medium”: “0”,
                        “Low”: “1”
                    },
                    {
                        “Critical”: “6”,
                        “High”: “2”,
                        “Medium”: “1”,
                        “Low”: “5”
                    },
                    {
                        “Critical”: “9”,
                        “High”: “6”,
                        “Medium”: “7”,
                        “Low”: “4”
                    },
                    {
                        “Critical”: “2”,
                        “High”: “8”,
                        “Medium”: “9”,
                        “Low”: “2”
                    },
                    {
                        “Critical”: “6”,
                        “High”: “7”,
                        “Medium”: “0”,
                        “Low”: “2”
                    },
                    {
                        “Critical”: “0”,
                        “High”: “0”,
                        “Medium”: “0”,
                        “Low”: “0”
                    },
                    {
                        “Critical”: “0”,
                        “High”: “2”,
                        “Medium”: “7”,
                        “Low”: “8”
                    },
                    {
                        “Critical”: “1”,
                        “High”: “2”,
                        “Medium”: “8”,
                        “Low”: “0”
                    }
                ],
                "values_font_size":15
            },
            “y_axis_increase_ticks_by_percentage”: 20,
            “width”:700, 
            “height”:400, 
            "margin": {
                "top":10,
                "bottom":70,
                "left":80,
                "right":30
            }
        }
    }
]><#json><={ }=>{/}


// Not required for this webhook

Tag	Applies to
{tenant_url}	All emails
{now}	All emails.
{now \| dateFormat:["mm/dd/yyyy"]}	All emails. See dateFormat for all options.
{now \| dateSubtract:[1, days] \| dateFormat:["mm/dd/yyyy"]}	All emails.
{now \| dateAdd:[7, days] \| dateFormat:["mm/dd/yyyy"]}	All emails.
{config.vulnerability.priority.critical.color_light}	All emails.
{config.vulnerability.priority.critical.color_dark}	All emails.
{config.vulnerability.priority.high.color_light}	All emails.
{config.vulnerability.priority.high.color_dark}	All emails.
{config.vulnerability.priority.medium.color_light}	All emails.
{config.vulnerability.priority.medium.color_dark}	All emails.
{config.vulnerability.priority.low.color_light}	All emails.
{config.vulnerability.priority.low.color_dark}	All emails.
{config.vulnerability.priority.info.color_light}	All emails.
{config.vulnerability.priority.info.color_dark}	All emails.
{config.vulnerability.status.closed.color_light}	All emails.
{config.vulnerability.status.closed.color_dark}	All emails.
{config.vulnerability.status.retest.color_light}	All emails.
{config.vulnerability.status.retest.color_dark}	All emails.
{config.vulnerability.status.open.color_light}	All emails.
{config.vulnerability.status.open.color_dark}	All emails.
{link}	1.1, 1.2, 1.3, 1.4, 1.5, 1.6, 2.2, 3.1, 3.3, 4.1, 4.2, 4.3, 4.4, 4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12, 4.13, 4.14, 4.15, 4.16, 4.17
{link.url}	1.1, 1.2, 1.3, 1.4, 1.5, 1.6, 2.2, 3.1, 3.3, 4.1, 4.2, 4.3, 4.4, 4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12, 4.13, 4.14, 4.15, 4.16, 4.17
{invite_link}	3.6
{invite_link.url}	3.6
{recipient.first_name}	All emails
{recipient.project_role}	4.1, 4.13
{recipient.password_reset_link}	3.1
{recipient.password_reset_link.url}	3.1
{recipient.account_activation_link}	3.3
{recipient.account_activation_link.url}	3.3
{retest_round.date}	4.14, 4.15, 4.16
{retest_round.requestor.first_name}	4.15
{retest_round.requestor.last_name}	4.15
{retest_round.actioned_by.first_name}	4.14, 4.16
{retest_round.actioned_by.last_name}	4.14, 4.16
{retest_round.vulnerabilities.total}	4.14, 4.15, 4.16
{review_note.creator.first_name}	4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11
{review_note.creator.last_name}	4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11
{review_note.note}	4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11
{review_note.topic}	4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11
{review_note.original_note}	4.6, 4.8, 4.9, 4.11
{review_note.reply_note}	4.6, 4.8, 4.9, 4.11
{group.name}	2.1
{user.first_name}	3.5, 3.6
{user.last_name}	3.5, 3.6
{user.username}	3.5
{user.email_address}	3.5
{user.role}	3.5
{user.ip_address}	3.2
{user.created_by.first_name}	3.5
{user.created_by.last_name}	3.5
{project_request.requestor.first_name}	1.5, 1.6
{project_request.requestor.last_name}	1.5, 1.6
{project_request.requested_information.details}	1.4
{project_request.rejected.reason}	1.3
{project_request.name}	1.1, 1.2, 1.3, 1.4, 1.5, 1.6
{project_request.id}	1.1, 1.2, 1.3, 1.4, 1.5, 1.6
{project_request.created_datetime}	1.1, 1.2, 1.3, 1.4, 1.5, 1.6
{project_request.last_updated_datetime}	1.1, 1.2, 1.3, 1.4, 1.5, 1.6
{project_request.status}	1.1, 1.2, 1.3, 1.4, 1.5, 1.6
{project_request.start_date}	1.1, 1.2, 1.3, 1.4, 1.5, 1.6
{project_request.end_date}	1.1, 1.2, 1.3, 1.4, 1.5, 1.6
{project_request.scope}	1.1, 1.2, 1.3, 1.4, 1.5, 1.6
{project_request.groups}	1.1, 1.2, 1.3, 1.4, 1.5, 1.6
{project_request.test_suites}	1.1, 1.2, 1.3, 1.4, 1.5, 1.6
{project_request.testing_hours}	1.1, 1.2, 1.3, 1.4, 1.5, 1.6
{project_request.onsite_testing}	1.1, 1.2, 1.3, 1.4, 1.5, 1.6
{project_request.justification}	1.1, 1.2, 1.3, 1.4, 1.5, 1.6
{project_request.organization_code}	1.1, 1.2, 1.3, 1.4, 1.5, 1.6
{project_request.link}	1.1, 1.2, 1.3, 1.4, 1.5, 1.6
{project_request.custom_field.<KEY>}	1.1, 1.2, 1.3, 1.4, 1.5, 1.6
{project.name}	2.2, 4.1, 4.2, 4.3, 4.4, 4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12, 4.13, 4.14, 4.15, 4.16, 4.17
{project.code}	2.2, 4.1, 4.2, 4.3, 4.4, 4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12, 4.13, 4.14, 4.15, 4.16, 4.17
{project.id}	2.2, 4.1, 4.2, 4.3, 4.4, 4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12, 4.13, 4.14, 4.15, 4.16, 4.17
{project.created_datetime}	2.2, 4.1, 4.2, 4.3, 4.4, 4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12, 4.13, 4.14, 4.15, 4.16, 4.17
{project.last_updated_datetime}	2.2, 4.1, 4.2, 4.3, 4.4, 4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12, 4.13, 4.14, 4.15, 4.16, 4.17
{project.start_date}	2.2, 4.1, 4.2, 4.3, 4.4, 4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12, 4.13, 4.14, 4.15, 4.16, 4.17
{project.end_date}	2.2, 4.1, 4.2, 4.3, 4.4, 4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12, 4.13, 4.14, 4.15, 4.16, 4.17
{project.organization_code}	2.2, 4.1, 4.2, 4.3, 4.4, 4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12, 4.13, 4.14, 4.15, 4.16, 4.17
{project.link}	2.2, 4.1, 4.2, 4.3, 4.4, 4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12, 4.13, 4.14, 4.15, 4.16, 4.17
{project.custom_field.<KEY>}	2.2, 4.1, 4.2, 4.3, 4.4, 4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12, 4.13, 4.14, 4.15, 4.16, 4.17
{project.on_hold.status}	4.3
{project.on_hold.details}	4.3
{project.off_hold.status}	4.4
{project.off_hold.details}	4.4
{vulnerability.id}	4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12
{vulnerability.created_datetime}	4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12
{vulnerability.last_updated_datetime}	4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12
{vulnerability.discovered_by.first_name}	4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12
{vulnerability.discovered_by.last_name}	4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12
{vulnerability.actioned_by.first_name}	4.12
{vulnerability.actioned_by.last_name}	4.12
{vulnerability.title}	4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12
{vulnerability.priority}	4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12
{vulnerability.affected_assets}	4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12
{vulnerability.likelihood_of_exploitation}	4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12
{vulnerability.zero_day}	4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12
{vulnerability.description}	4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12
{vulnerability.attack_scenario}	4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12
{vulnerability.remediation_recommendation}	4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12
{vulnerability.proof_of_concept}	4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12
{vulnerability.status}	4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12
{vulnerability.code}	4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12
{vulnerability.sla_date}	4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12
{vulnerability.target_remediation_date}	4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12
{vulnerability.tags}	4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12
{vulnerability.cvssv3.base_score}	4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12
{vulnerability.cvssv3.temporal_score}	4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12
{vulnerability.cvssv3.environmental_score}	4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12
{vulnerability.cvssv3.vector}	4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12
{vulnerability.notes}	4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12
{vulnerability.custom_tag.<KEY>}	4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12
{vulnerability.custom_field.<KEY>}	4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12
{vulnerability.link}	4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12
{vulns_count}	3.7, 3.8
{critical_vulns_count}	3.7, 3.8
{high_vulns_count}	3.7, 3.8
{medium_vulns_count}	3.7, 3.8
{low_vulns_count}	3.7, 3.8
{info_vulns_count}	3.7, 3.8
{closed_vulns_count}	3.7, 3.8
{retest_vulns_count}	3.7, 3.8
{project_requests_count}	3.7, 3.8
{projects_in_progress_count}	3.7, 3.8
{projects_completed_count}	3.7, 3.8
{projects_overrun_count}	3.7, 3.8
{projects_waiting_to_start_count}	3.7, 3.8
{users_registered_count}	3.7, 3.8

Rating	CVSSv3.1 Score
" + data.vulnerability_priority + "	" + cvssScore + "

Field	Value
Scan Reference	' + data.scan_ref + '
Project	' + data.project_name + '
Step	' + data.flow_status?.step + '
Status	' + data.flow_status?.status + '
Message	' + data.flow_status?.message + '
Time	' + current_display_date + '

Field	Value
Scan Reference	' + data.scan_ref + '
Step	' + data.flow_status.step + '
Status	' + data.flow_status.status + '
Message	' + data.flow_status.message + '
Time	' + current_display_date + '

Testing Progress

Vulnerabilities Found Today

[SECURITY][VULNERABILITY] ' + data.vulnerability_title + '

Description

Affected Asset

Affected Asset(s)

Technical Severity

Technical Severity

Attack Scenario (Technical Risk)

Recommendations

Notes

Steps to Reproduce

Tags