andymeneely / attack-surface-metrics

Scripts for collecting metrics of the attack surface
MIT License
14 stars 4 forks source link

Collect the vulnerability data for Wordpress #21

Closed andymeneely closed 10 years ago

andymeneely commented 10 years ago

Based on the spreadsheet I started, we need the CVEs and their SVN fixes for each vulnerability in Wordpress. Use the CVE data from nvd.nist.gov to get this data and find the tracing between the CVE and the SVN fix. If there are any that are hard to find, flag it and I'll pick them up.

I recommend downloading the XML files from the NVD data feeds and searching for those links to Trac.

andymeneely commented 10 years ago

We're calling this one done for now. We haven't finished tracing all of them, but we've got a good population for now.