Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Feature: Notify only on CVE score change #497

Open
RolphH opened this issue Jan 9, 2025 · 2 comments
Open

Feature: Notify only on CVE score change #497

RolphH opened this issue Jan 9, 2025 · 2 comments
Assignees
@ncrocfer
Labels
enhancement New feature or request

Comments

@RolphH
Copy link

RolphH commented Jan 9, 2025

Is your feature request related to a problem?
We currently get notified in case metrics changed and CVSSv3.1 score is >=9. However, this also notifies is the CVSSv3.1 score isn't changed but other metrics are changed. This causes false reports as usually the CVE is already known.

Do you have a solution in mind, or a suggestion to improve OpenCVE?
We would like to have an extra notification option to notify on CVSSv3.1 Score change
@RolphH RolphH changed the title Notify only on CVE score change Feature: Notify only on CVE score change Jan 9, 2025
@ncrocfer ncrocfer self-assigned this Jan 9, 2025
@ncrocfer ncrocfer added the enhancement New feature or request label Jan 9, 2025
@ncrocfer
Copy link
Member

ncrocfer commented Jan 9, 2025

Indeed, notification filters only support CVSS v3.1 at the moment, we need to improve this. We have a lot of issues to deal with but we will definitely add this one to our backlog ;)

@RolphH
Copy link
Author

RolphH commented Jan 9, 2025 •
edited
Loading

Problem is not that it only supports CVSS3.1 score, but I only want to be notified if that score actually changed. Not that (f.e.) when the SSVC changed , I got notified (which is currently happening), as the metrics changed.

Example notification setting:

  • new CVE is created
  • one or more subscriptions first appeared
  • its metrics changed
  • its vendors&products have changed
  • alert when CSVSS3.1 score >=9

When there are changes to the metrics like this:
ssvc {'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

we still get an alert. While the CVSS score hasn;'t changed.

We only want notification on CVSS score changes

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@ncrocfer ncrocfer

Labels
enhancement New feature or request
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@ncrocfer @RolphH