Manually created vulnerabilities all share a common location

Summary

Manually created vulnerabilities all share a common, hard-coded location fingerprint. This means that when two vulnerabilities are created with the same primary identifier, they are considered duplicates because they have the same UUID.

Steps to reproduce

  1. Go to https://gitlab.com/project/path/-/security/vulnerabilities/new on an Ultimate-licensed project
  2. Fill in all of the fields and create the vulnerability
  3. Go back to https://gitlab.com/project/path/-/security/vulnerabilities/new and fill in the form again with a different name and description, but the same identifier information.
  4. Attempt to submit the form
  5. Receive "Vulnerability with those details already exists"

What is the current bug behavior?

It is not possible to create multiple manual vulnerabilities with the same identifier

What is the expected correct behavior?

It should be possible to create multiple manual vulnerabilities with the same identifier

Relevant logs and/or screenshots

Screen_Shot_2022-09-12_at_1.20.21_PM

Possible fixes

Change the location fingerprint for manually created vulnerabilities to a UUID or incremental value