B318 - blacklist: Test case result

The below summarizes the result of the test "B318 - blacklist" in build 11 of CASA - Release Engineering Cmake Package Audit - Vulnerability - Bandit CASA6 CasaTasks.

• Description: B318 - blacklist
• Test class: /wheeldirectory/casa6/casatasks/src/private/casaxmlutil.py
• Method: B318 - blacklist

• Duration: < 1 sec
• Status: Failed (Existing Failure)

Error Log

MEDIUM: Using xml.dom.minidom.parse to parse untrusted XML data is known to be vulnerable to XML attacks. Replace xml.dom.minidom.parse with its defusedxml equivalent function or make sure defusedxml.defuse_stdlib() is called
Test ID: B318
Severity: MEDIUM
Confidence: HIGH
CWE: 20 (https://cwe.mitre.org/data/definitions/20.html)
Location: /wheeldirectory/casa6/casatasks/src/private/casaxmlutil.py:182
Code: 182
Using xml.dom.minidom.parse to parse untrusted XML data is known to be vulnerable to XML attacks. Replace xml.dom.minidom.parse with its defusedxml equivalent function or make sure defusedxml.defuse_stdlib() is called
More info: https://bandit.readthedocs.io/en/1.9.4/blacklists/blacklist_calls.html#b313-b320-xml-bad-minidom