CVEProject / cve-website

The new CVE website
66 stars 35 forks source link

Updated date in CNA box is not for that container #3018

Closed ElectricNroff closed 1 week ago

ElectricNroff commented 3 weeks ago

https://github.com/CVEProject/cve-website/blob/103e3c109171d26fbd39525d34fefa809d91a3d5/src/views/CVERecord/PublishedRecord.vue#L272-L273 Within a box that clearly appears to be a CNA-oriented box, there is an Updated field, but this is not the containers.cna.providerMetadata.dateUpdated value. For example:

https://www.cve.org/CVERecord?id=CVE-2023-0240
rendered Updated = 2024-08-02
cveMetadata.dateUpdated = 2024-08-02T05:02:43.942Z
containers.cna.providerMetadata.dateUpdated = 2023-01-30T13:17:09.182Z

Although this might make sense to users who had visited the CVE Record detail lookup pages in the old cve.org website design, it is most likely counterintuitive to many people who are only looking at the new design.

athu-tran commented 1 week ago

Resolved by #3050.