Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

meaning of a CWE ID is sometimes omitted #3019

Open
ElectricNroff opened this issue Aug 20, 2024 · 0 comments
Open

meaning of a CWE ID is sometimes omitted #3019

ElectricNroff opened this issue Aug 20, 2024 · 0 comments
Labels
cve-record-page needs-discussion Needs more discussion, either with TWG or internally

Comments

@ElectricNroff
Copy link

<span class="has-text-weight-bold">{{ cwe.cweId }}<span v-if="cwe.description.length > 0">: </span></span>
<span v-if="cwe.description.length > 0">{{ cwe.description }}</span>

For example, https://cveawg.mitre.org/api/cve/CVE-2023-0594 has:

"problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79",

and https://www.cve.org/CVERecord?id=CVE-2023-0594 renders this as:

CWE
Learn more
CWE-79: CWE-79

I feel that, if cweId is present, then fields such as problemTypes[0].descriptions[0].description should be ignored, and the text to the right of the colon should be obtained from the CWE project, e.g., https://cwe-api.mitre.org/api/v1/cwe/weakness/79 under weaknesses[0].Name in this situation.

@athu-tran athu-tran closed this as completed by moving to Low Priority in CVE Website Backlog Aug 22, 2024
@athu-tran athu-tran reopened this Aug 27, 2024
@jdaigneau5 jdaigneau5 added the needs-discussion Needs more discussion, either with TWG or internally label Oct 14, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
cve-record-page needs-discussion Needs more discussion, either with TWG or internally
Projects
Status: Needs Triage
Development

No branches or pull requests

3 participants