Fix cvss and response overwrite

OWASP · Jun 18, 2024 · 69aa0a6 · 69aa0a6
1 parent b0c4388
commit 69aa0a6
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/pytm/pytm.py b/pytm/pytm.py
@@ -2024,6 +2024,8 @@ def encode_threat_data(obj):
         "threat_id",
         "references",
         "condition",
+        "cvss",
+        "response",
     ]
 
     if type(obj) is Finding or (len(obj) != 0 and type(obj[0]) is Finding):
@@ -2039,7 +2041,8 @@ def encode_threat_data(obj):
                 # ignore missing attributes, since this can be called
                 # on both a Finding and a Threat
                 continue
-            setattr(t, a, html.escape(v))
+            if v is not None:
+                setattr(t, a, html.escape(v))
 
         encoded_threat_data.append(t)