cve-search / vulnerability-lookup

Vulnerability-Lookup facilitates quick correlation of vulnerabilities from various sources, independent of vulnerability IDs, and streamlines the management of Coordinated Vulnerability Disclosure (CVD).
https://vulnerability.circl.lu
GNU Affero General Public License v3.0
136 stars 16 forks source link

[Bug] Custom vulnerability not correctly displayed #58

Closed FafnerKeyZee closed 4 months ago

FafnerKeyZee commented 4 months ago

Hello,

I created a vuln using your own (using and modifying info in the json). It's visible to recent tab: image

But when I try to get details, It's only show the json output and not a view as in your website: image

image

BR,

FafnerKeyZee commented 4 months ago

Hello, Working like a charm :)

BR,

cedricbonhomme commented 4 months ago

thank you for testing, local security advisories is really new and will be improved.

For you information, for the moment we store the list of updates in the JSON, here:

{
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "cveMetadata": {
    "vulnId": "CIRCL-SA-2024-6271",
    "cveId": "CVE-2024-6271",
    "assignerOrgId": "00000000-0000-4000-9000-000000000000",
    "assignerShortName": "WPScan",
    "vulnerabilitylookup_history": [
      [
        "cedric@cedricbonhomme.org",
        "2024-07-22T10:33:09.555455Z"
      ]
    ],
    "requesterUserId": "00000000-0000-4000-9000-000000000000",
    "dateUpdated": "2024-07-22T10:33:00.000Z",
    "serial": 1,
    "dateReserved": "2024-06-22T20:56:00.000Z",
    "datePublished": "2024-07-22T06:00:00.000Z",
    "state": "PUBLISHED"
  }

}

In vulnerabilitylookup_history, as you can see. This will probably change in the near future because it seems that ''cveMetadata'' is not the best place for that.