RedHatProductSecurity / cvelib

A Python library and command line interface for CVE Services.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Feature request: make cve records with a single quote in their body easy to submit

MrSeccubus opened this issue · comments

If you want to submit a CVE record that has signe quotes in them, it is hard to make the shell syntax work.

Solutions would be:

  • Allowing the json to be read form a file
  • Allowing the json to be read from stdin

You will get this is you make a record with vulnogram and select the following problem type:

"problemTypes": [
                {
                    "descriptions": [
                        {
                            "cweId": "CWE-1321",
                            "description": "CWE-1321: Improperly Controlled Modification of Object Prototype Attributes (\"Prototype Pollution\")",
                            "lang": "en",
                            "type": "CWE"
                        }
                    ]
                }
            ],

The publish command already has submission from a file as an option:

-f, --cve-json-file FILENAME  File containing JSON body of CVE record to publish.

It's only available on master but I can do a new release by the end of the week to also include some of the changes from the other issues you filed.

Thanks @mprpic, Much appreciated.