Information
DefectDojo tag v1.15
Api endpoint import-scan
When you try to import the result file from Checkmarx using the API or the Web UI and changing the active state to true and the verify state to True, the findings are always setted as inactive.

Bug description
Problem importing the Checkmarx file report using the "checkmarx scan" and "checkmarx scan detailed" importer.
The problem is reproduced using the API endpoint (import-scan) and the WEB UI. Findigns state is always "Inactive" when the import process is done successfully setting the Active and Verified flag to True. It seems that these flags are ignored:

curl -X POST "https://defect-dojo.dmain/api/v2/import-scan/" -H "accept: application/json" -H "Content-Type: multipart/form-data" -H "X-CSRFToken: token" -F "scan_date=2021-06-02" -F "minimum_severity=Info" -F "active=true" -F "verified=true" -F "scan_type=Checkmarx Scan" -F "file=@ssdlc-testing.xml;type=text/xml" -F "engagement=51" -F "close_old_findings=false" -F "push_to_jira=false"

Expected behavior
Finding state must change if you set the active or verify flag status to False or True.