Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Affected software versions not shown for some advisories via API #95

Open
mindsur opened this issue Mar 27, 2024 · 0 comments
Open

Affected software versions not shown for some advisories via API #95

mindsur opened this issue Mar 27, 2024 · 0 comments

Comments

@mindsur
Copy link

mindsur commented Mar 27, 2024

Describe the bug
Even though the vulnerability is in "Final" state, affected software versions are not shown via API. But it is shown in the regular Cisco Security Advisory page.

To Reproduce
Official page describing vulnerability:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http2-reset-d8Kf32vZ

API representation:
curl -X GET -H "Accept: application/json" -H "Authorization: Bearer <removed>" 'https://apix.cisco.com/security/advisories/v2/advisory/cisco-sa-http2-reset-d8Kf32vZ'

Expected behavior
Show at least the same affected product information (including affected/fixed versions) via API as in the CiscoSecurityAdvisory page.

Screenshots
Web page data with affected products + fixed versions:
image

API response with affected products:
Screenshot_20240327_102806

Additional context
Seems that the proccess of syncing the affected version data is not prioritized for the openVulnAPI backend, which is a shame.
For this product to be usable it should be up to date and considered reliable.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant