diff --git a/reachability/python/vulnerable-function-not-used/README.md b/reachability/python/vulnerable-function-not-used/README.md new file mode 100644 index 0000000..bf2b214 --- /dev/null +++ b/reachability/python/vulnerable-function-not-used/README.md @@ -0,0 +1,3 @@ +## Vulnerable Example + +- CVE: https://nvd.nist.gov/vuln/detail/CVE-2023-43810#range-9654740 \ No newline at end of file diff --git a/reachability/python/vulnerable-function-not-used/main.py b/reachability/python/vulnerable-function-not-used/main.py new file mode 100644 index 0000000..5eb3434 --- /dev/null +++ b/reachability/python/vulnerable-function-not-used/main.py @@ -0,0 +1,13 @@ +from flask import Flask +from opentelemetry.instrumentation.flask import FlaskInstrumentor + +app = Flask(__name__) + +# FlaskInstrumentor().instrument_app(app) + +@app.route("/", methods=["UNKNOWN"]) +def hello(): + return "Hello!" + +if __name__ == "__main__": + app.run(debug=True) \ No newline at end of file diff --git a/reachability/python/vulnerable-function-not-used/requirements.txt b/reachability/python/vulnerable-function-not-used/requirements.txt new file mode 100644 index 0000000..31aeea8 --- /dev/null +++ b/reachability/python/vulnerable-function-not-used/requirements.txt @@ -0,0 +1,18 @@ +blinker==1.7.0 +click==8.1.7 +Deprecated==1.2.14 +Flask==3.0.3 +importlib-metadata==7.0.0 +itsdangerous==2.2.0 +Jinja2==3.1.3 +MarkupSafe==2.1.5 +opentelemetry-api==1.24.0 +opentelemetry-instrumentation==0.25b2 +opentelemetry-instrumentation-flask==0.25b2 +opentelemetry-instrumentation-wsgi==0.25b2 +opentelemetry-semantic-conventions==0.25b2 +opentelemetry-util-http==0.25b2 +setuptools==69.5.1 +Werkzeug==3.0.2 +wrapt==1.16.0 +zipp==3.18.1 \ No newline at end of file diff --git a/reachability/python/vulnerable-function-not-used/setup.py b/reachability/python/vulnerable-function-not-used/setup.py new file mode 100644 index 0000000..92a5ba6 --- /dev/null +++ b/reachability/python/vulnerable-function-not-used/setup.py @@ -0,0 +1,11 @@ +from setuptools import setup, find_packages + +with open('requirements.txt') as f: + requirements = f.read().splitlines() + +setup( + name='python-vuln-sample', + version='1.0.0', + packages=find_packages(), + install_requires=requirements, +) \ No newline at end of file diff --git a/reachability/python/vulnerable-function-used/README.md b/reachability/python/vulnerable-function-used/README.md new file mode 100644 index 0000000..bf2b214 --- /dev/null +++ b/reachability/python/vulnerable-function-used/README.md @@ -0,0 +1,3 @@ +## Vulnerable Example + +- CVE: https://nvd.nist.gov/vuln/detail/CVE-2023-43810#range-9654740 \ No newline at end of file diff --git a/reachability/python/vulnerable-function-used/main.py b/reachability/python/vulnerable-function-used/main.py new file mode 100644 index 0000000..e69de29 diff --git a/reachability/python/vulnerable-function-used/requirements.txt b/reachability/python/vulnerable-function-used/requirements.txt new file mode 100644 index 0000000..31aeea8 --- /dev/null +++ b/reachability/python/vulnerable-function-used/requirements.txt @@ -0,0 +1,18 @@ +blinker==1.7.0 +click==8.1.7 +Deprecated==1.2.14 +Flask==3.0.3 +importlib-metadata==7.0.0 +itsdangerous==2.2.0 +Jinja2==3.1.3 +MarkupSafe==2.1.5 +opentelemetry-api==1.24.0 +opentelemetry-instrumentation==0.25b2 +opentelemetry-instrumentation-flask==0.25b2 +opentelemetry-instrumentation-wsgi==0.25b2 +opentelemetry-semantic-conventions==0.25b2 +opentelemetry-util-http==0.25b2 +setuptools==69.5.1 +Werkzeug==3.0.2 +wrapt==1.16.0 +zipp==3.18.1 \ No newline at end of file diff --git a/reachability/python/vulnerable-function-used/setup.py b/reachability/python/vulnerable-function-used/setup.py new file mode 100644 index 0000000..92a5ba6 --- /dev/null +++ b/reachability/python/vulnerable-function-used/setup.py @@ -0,0 +1,11 @@ +from setuptools import setup, find_packages + +with open('requirements.txt') as f: + requirements = f.read().splitlines() + +setup( + name='python-vuln-sample', + version='1.0.0', + packages=find_packages(), + install_requires=requirements, +) \ No newline at end of file