From c74d753f92c983186183cc41d6df0982dde6b930 Mon Sep 17 00:00:00 2001 From: To-om Date: Thu, 9 Jul 2020 08:35:15 +0200 Subject: [PATCH] #1424 Enforce MISP threat level range --- thehive-misp/app/connectors/misp/MispExport.scala | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/thehive-misp/app/connectors/misp/MispExport.scala b/thehive-misp/app/connectors/misp/MispExport.scala index 6ad0c766be..4e7bde9e08 100644 --- a/thehive-misp/app/connectors/misp/MispExport.scala +++ b/thehive-misp/app/connectors/misp/MispExport.scala @@ -32,7 +32,7 @@ class MispExport @Inject()( lazy val dateFormat = new SimpleDateFormat("yy-MM-dd") private[misp] lazy val alertSrv = alertSrvProvider.get - lazy val logger: Logger = Logger(getClass) + lazy val logger: Logger = Logger(getClass) def relatedMispEvent(mispName: String, caseId: String): Future[(Option[String], Option[String])] = { import org.elastic4play.services.QueryDSL._ @@ -74,7 +74,7 @@ class MispExport @Inject()( val mispEvent = Json.obj( "Event" → Json.obj( "distribution" → 0, - "threat_level_id" → (4 - severity), + "threat_level_id" → math.min(4, math.max(1, 4 - severity)), "analysis" → 0, "info" → title, "date" → dateFormat.format(date),