dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Renamed to vulnerablecomponents

Browse Source
This commit is contained in:
Àngel Ollé Blázquez
2022-07-30 22:41:26 +02:00
parent b93c935d6c
commit 256c1dd3aa
28 changed files with 24 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
src/main/resources/lessons/vulnerablecomponents/documentation/VulnerableComponents_content4c.adoc Normal file
View File

@ -0,0 +1,23 @@
== Architecture Information
=== What's important?
* Is my component old or is it stable
* Is my component unpopular
* Was my lack of upgrade a deliberate choice or a lack of knowledge
=== Summary
* It's really difficult to keep components up to date
For the components analyzed in 25,000 applications it was found that:
* 8% of 2 year old components did not have a newer version
* 23% of 11 year old components did not have a newer version
* Older components make up the majority of the risk
[cols="2a,2a"]
|===
| image::images/Old-Components.png[caption="Figure: ", title="Old Components", alt="Old Components", width="355", height="304", style="lesson-image"]
| image::images/Risk-of-Old-Components.png[caption="Figure: ", title="Risk of Old Components", alt="Risk of Old Components", width="355", height="304", style="lesson-image"]
|===