Skip to content

Commit

Permalink
Another disputed string for CVE-2023-39017
Browse files Browse the repository at this point in the history
Signed-off-by: Prabhu Subramanian <prabhu@appthreat.com>
  • Loading branch information
prabhu committed Aug 27, 2024
1 parent d727689 commit 6f51479
Show file tree
Hide file tree
Showing 2 changed files with 5 additions and 3 deletions.
2 changes: 1 addition & 1 deletion pyproject.toml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
[project]
name = "appthreat-vulnerability-db"
version = "5.7.4"
version = "5.7.5"
description = "AppThreat's vulnerability database and package search library with a built-in file based storage. OSV, CVE, GitHub, npm are the primary sources of vulnerabilities."
authors = [
{name = "Team AppThreat", email = "cloud@appthreat.com"},
Expand Down
6 changes: 4 additions & 2 deletions vdb/lib/nvd.py
Original file line number Diff line number Diff line change
Expand Up @@ -317,8 +317,10 @@ def convert_api_vuln(vuln):
base_score = None
description = NvdSource._get_value(vuln, "descriptions")
# Ignore disputed CVEs. Eg: CVE-2023-35116
if "** DISPUTED **" in description or "this is not a valid vulnerability report" in description:
return None
# CVE-2023-39017
for ds in ("** DISPUTED **", "this is not a valid vulnerability report", "this is disputed"):
if ds in description:
return None
rdata = vuln.get("references", [])
related_urls = [r["url"] for r in rdata]
metrics = vuln.get("metrics", {})
Expand Down

0 comments on commit 6f51479

Please sign in to comment.