defectdojo
Facilitates vulnerability management and DevSecOps processes using DefectDojo's API for enhanced security integration.
Install this skill
Security score
The defectdojo skill was audited on Feb 19, 2026 and we found 25 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 122 | ```json |
Template literal with variable interpolation in command context
| 296 | ```yaml |
Template literal with variable interpolation in command context
| 329 | ```groovy |
Template literal with variable interpolation in command context
| 358 | ```yaml |
Curl to non-GitHub URL
| 245 | curl -X POST "https://defectdojo.example.com/api/v2/import-scan/" \ |
Curl to non-GitHub URL
| 273 | curl -X POST "https://defectdojo.example.com/api/v2/reimport-scan/" \ |
Webhook reference - potential data exfiltration
| 545 | 3. **Configure Webhook (bidirectional sync):** |
Webhook reference - potential data exfiltration
| 546 | - Create webhook in JIRA pointing to: |
Webhook reference - potential data exfiltration
| 547 | `https://<defectdojo>/jira/webhook/<webhook-secret>` |
Access to hidden dotfiles in home directory
| 781 | KUBECONFIG=~/.kube/aks-rg-hypera-cafehyna-dev-config kubectl get pods -n defectdojo |
Access to hidden dotfiles in home directory
| 787 | KUBECONFIG=~/.kube/aks-rg-hypera-cafehyna-dev-config kubectl logs -n defectdojo -l app.kubernetes.io/name=defectdojo -c uwsgi |
Access to hidden dotfiles in home directory
| 793 | KUBECONFIG=~/.kube/aks-rg-hypera-cafehyna-dev-config kubectl rollout restart deployment/defectdojo-django -n defectdojo |
External URL reference
| 40 | - Demo: <https://demo.defectdojo.org> (admin / 1Defectdojo@demo#appsec) |
External URL reference
| 129 | "DEFECTDOJO_URL": "https://defectdojo.dev.cafehyna.com.br", |
External URL reference
| 245 | curl -X POST "https://defectdojo.example.com/api/v2/import-scan/" \ |
External URL reference
| 273 | curl -X POST "https://defectdojo.example.com/api/v2/reimport-scan/" \ |
External URL reference
| 325 | Install the DefectDojo Jenkins plugin from: <https://plugins.jenkins.io/defectdojo/> |
External URL reference
| 333 | DEFECTDOJO_URL = 'https://defectdojo.example.com' |
External URL reference
| 431 | api = DefectDojoAPI('https://defectdojo.example.com', 'your-api-token') |
External URL reference
| 547 | `https://<defectdojo>/jira/webhook/<webhook-secret>` |
External URL reference
| 555 | value: "https://your-jira.atlassian.net" |
External URL reference
| 587 | | Redirect URI | `https://defectdojo.dev.cafehyna.com.br/complete/azuread-tenant-oauth2/` | |
External URL reference
| 663 | siteUrl: https://defectdojo.dev.cafehyna.com.br |
External URL reference
| 771 | https://defectdojo.dev.cafehyna.com.br/login?force_login_form |
External URL reference
| 814 | - [Swagger UI](https://defectdojo.dev.cafehyna.com.br/api/v2/oa3/swagger-ui/) - Interactive API docs |