diff --git a/dojo/finding/views.py b/dojo/finding/views.py index 271717cb6c3..e0a54e97bfc 100644 --- a/dojo/finding/views.py +++ b/dojo/finding/views.py @@ -539,7 +539,9 @@ def get_similar_findings(self, request: HttpRequest, finding: Finding): finding_filter_class = SimilarFindingFilterWithoutObjectLookups if filter_string_matching else SimilarFindingFilter similar_findings_filter = finding_filter_class( request.GET, - queryset=get_authorized_findings(Permissions.Finding_View), + queryset=get_authorized_findings(Permissions.Finding_View) + .filter(test__engagement__product=finding.test.engagement.product) + .exclude(id=finding.id), user=request.user, finding=finding, ) @@ -3027,7 +3029,10 @@ def get_missing_mandatory_notetypes(finding): def mark_finding_duplicate(request, original_id, duplicate_id): original = get_object_or_404(Finding, id=original_id) - duplicate = get_object_or_404(Finding, id=duplicate_id) + duplicate = get_object_or_404( + Finding.objects.filter(test__engagement__product=original.test.engagement.product), + id=duplicate_id, + ) if original.test.engagement != duplicate.test.engagement: if (original.test.engagement.deduplication_on_engagement @@ -3112,7 +3117,10 @@ def reset_finding_duplicate_status(request, duplicate_id): def set_finding_as_original_internal(user, finding_id, new_original_id): finding = get_object_or_404(Finding, id=finding_id) - new_original = get_object_or_404(Finding, id=new_original_id) + new_original = get_object_or_404( + Finding.objects.filter(test__engagement__product=finding.test.engagement.product), + id=new_original_id, + ) if finding.test.engagement != new_original.test.engagement: if (finding.test.engagement.deduplication_on_engagement diff --git a/dojo/templates/dojo/finding_related_list.html b/dojo/templates/dojo/finding_related_list.html index 5354346a5fb..69579630703 100644 --- a/dojo/templates/dojo/finding_related_list.html +++ b/dojo/templates/dojo/finding_related_list.html @@ -12,7 +12,6 @@