cwe.csv: contains vulnerabilities in english and spanish
cwe_en.csv: contains vulnerabilities only in english
cwe_es.csv: contains vulnerabilities only in spanish
About the script fix_severities.py:
This script takes a .csv file and changes the severities names inside this .csv so it won't have any trouble during the importation process. E.g: if you have a severity named med, this might fail when you import the file into Faraday so this script will change this name to medium. This way, it won't fail.
In
/data/
there arecwe.csv cwe_en.csv cwe_es.csv fix_severities.py
.What is the difference between
cwe_es.csv
andcwe.csv
? Because they are both in spanish but with few differences.Also why is there a script
fix_severities.py
in/data/
? It should be placed somewhere else.