Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

邮件发出发给了录入漏洞的人,而不是漏洞相关的系统负责人。 #35

Open
l4fu opened this issue Mar 24, 2021 · 2 comments

Comments

@l4fu
Copy link

l4fu commented Mar 24, 2021

邮件发出收不到。 action vul.py

@url(r"/vul/send_notification_email", category = "漏洞")
class VulSendNotificationEmail(LoginedRequestHandler):
"""
漏洞手动发送邮件

    id: 漏洞id
    title: 标题
    content: 内容
"""
def get(self):
    self.post(self)

def post(self):
    _id = self.get_argument("id")
    title = self.get_argument("title", "")
    content = self.get_argument("content", "")
    users = get_vul_relate_users2(_id)
    user_ids = [user.get("id") for user in users]
    settings = SystemSettings.get_or_none()
    global_setting = json.loads(settings.global_setting)

    vul = Vul.get_or_none(Vul._id == _id)

users = get_vul_relate_users2(_id)
这里的代码只拿到了发布或修改漏洞的人的信息,没有拿到应用系统的所有者的信息。 调试的结果是 我发布了一个漏洞,是别的系统的,但是发个邮件或短信发给了自己(短信是我自己加的。)

@8Ling
Copy link

8Ling commented Mar 24, 2021

我和你的情况一样,邮件发送给了系统配置那里,不能发送给漏洞对应的负责人账号

1 similar comment
@8Ling
Copy link

8Ling commented Mar 24, 2021

我和你的情况一样,邮件发送给了系统配置那里,不能发送给漏洞对应的负责人账号

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants