VulnerabilityHistoryProject / vulnerability-history

vulnerabilityhistory.org

MIT License

32 stars 5 forks source link

API: Similar vulnerabilities to this one #1101

Open andymeneely opened 1 year ago

andymeneely commented 1 year ago

Motivation

On the vulnerabilities#show page, we'd like to have a tab that shows vulnerabilities similar to these:

Details

Let's make some endpoints that query for similar vulnerabilities:

/vulnerabilities/CVE-2023-0000/same-cwe returns vulnerabilities that have the same CWE tag
/vulnerabilities/CVE-2023-0000/same-lessons returns all vulnerabilities that share a lesson as this one
/vulnerabilities/CVE-2023-0000/related returns vulnerabilities explicitly related, as in #1100
/vulnerabilities/CVE-2023-0000/same-directory are vulnerabilities in the same directory (this is hitting the events table instead of tags)

In each of these, return the results:

Sorted by upvotes, descending
Allow limit and offset
Return CVE, description, project, upvotes, and nickname

[x] I have checked the VHP backlog for something similar: https://github.com/VulnerabilityHistoryProject/vulnerability-history/issues
[x] I have checked if this should also be part of a Github Project: https://github.com/VulnerabilityHistoryProject/vulnerability-history/projects?type=beta
[x] I have checked that this might need dev infrastructure or refactor labels