[Question] data cwe

[noraj]

In /data/ there are cwe.csv cwe_en.csv cwe_es.csv fix_severities.py.

What is the difference between cwe_es.csv and cwe.csv? Because they are both in spanish but with few differences.

Also why is there a script fix_severities.py in /data/? It should be placed somewhere else.

[montive]

Hi there.

• cwe.csv: contains vulnerabilities in english and spanish
• cwe_en.csv: contains vulnerabilities only in english
• cwe_es.csv: contains vulnerabilities only in spanish

About the script fix_severities.py:

• This script takes a .csv file and changes the severities names inside this .csv so it won't have any trouble during the importation process. E.g: if you have a severity named med, this might fail when you import the file into Faraday so this script will change this name to medium. This way, it won't fail.