Function parse_advisory_data

vulnerabilities/importers/curl.py:58–146

Parse advisory data from raw JSON data and return an AdvisoryData object. Args: raw_data (dict): Raw JSON data containing advisory information. Returns: AdvisoryData: Parsed advisory data as an AdvisoryData object. Example: >>> raw_data = { ...

(raw_data)

def parse_advisory_data(raw_data) -> AdvisoryData:
    """
    Parse advisory data from raw JSON data and return an AdvisoryData object.

    Args:
        raw_data (dict): Raw JSON data containing advisory information.

    Returns:
        AdvisoryData: Parsed advisory data as an AdvisoryData object.

    Example:
        >>> raw_data = {
        ...     "aliases": ["CVE-2024-2379"],
        ...     "summary": "QUIC certificate check bypass with wolfSSL",
        ...     "database_specific": {
        ...         "package": "curl",
        ...         "URL": "https://curl.se/docs/CVE-2024-2379.json",
        ...         "www": "https://curl.se/docs/CVE-2024-2379.html",
        ...         "issue": "https://hackerone.com/reports/2410774",
        ...         "severity": "Low",
        ...         "CWE": {
        ...             "id": "CWE-297",
        ...             "desc": "Improper Validation of Certificate with Host Mismatch"
        ...         },
        ...     },
        ...     "published": "2024-03-27T08:00:00.00Z",
        ...     "affected": [
        ...         {
        ...             "ranges": [
        ...                 {
        ...                     "type": "SEMVER",
        ...                     "events": [
        ...                         {"introduced": "8.6.0"},
        ...                         {"fixed": "8.7.0"}
        ...                     ]
        ...                 }
        ...             ],
        ...             "versions": ["8.6.0"]
        ...         }
        ...     ]
        ... }
        >>> parse_advisory_data(raw_data)
        AdvisoryData(aliases=['CVE-2024-2379'], summary='QUIC certificate check bypass with wolfSSL', affected_packages=[AffectedPackage(package=PackageURL(type='generic', namespace='curl.se', name='curl', version=None, qualifiers={}, subpath=None), affected_version_range=GenericVersionRange(constraints=(VersionConstraint(comparator='=', version=SemverVersion(string='8.6.0')),)), fixed_version=SemverVersion(string='8.7.0'))], references=[Reference(reference_id='', reference_type='', url='https://curl.se/docs/CVE-2024-2379.html', severities=[VulnerabilitySeverity(system=Cvssv3ScoringSystem(identifier='cvssv3.1', name='CVSSv3.1 Base Score', url='https://www.first.org/cvss/v3-1/', notes='CVSSv3.1 base score and vector'), value='Low', scoring_elements='', published_at=None, url=None)]), Reference(reference_id='', reference_type='', url='https://hackerone.com/reports/2410774', severities=[])], date_published=datetime.datetime(2024, 3, 27, 8, 0, tzinfo=datetime.timezone.utc), weaknesses=[297], url='https://curl.se/docs/CVE-2024-2379.json')
    """

    affected = get_item(raw_data, "affected")[0] if len(get_item(raw_data, "affected")) > 0 else []

    ranges = get_item(affected, "ranges")[0] if len(get_item(affected, "ranges")) > 0 else []
    events = get_item(ranges, "events")[1] if len(get_item(ranges, "events")) > 1 else {}
    version_type = get_item(ranges, "type") if get_item(ranges, "type") else ""
    fixed_version = events.get("fixed")
    if version_type == "SEMVER" and fixed_version:
        fixed_version = SemverVersion(fixed_version)

    purl = PackageURL(type="generic", namespace="curl.se", name="curl")
    versions = affected.get("versions") or []
    affected_version_range = GenericVersionRange.from_versions(versions)