Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

using wildcards in the /cpes #179

Open
dmitry84 opened this issue Feb 8, 2021 · 2 comments
Open

using wildcards in the /cpes #179

dmitry84 opened this issue Feb 8, 2021 · 2 comments
Labels

Comments

@dmitry84
Copy link

dmitry84 commented Feb 8, 2021

Hi
I'm trying to understand is it possible to use wildcards in the /cpes queries.
For example
'{"name": "cpe:/a:sudo[wildcard]:sudo:-:-"}'

The reason why I'm asking this - there are items for which it is hard to get vendor name from the package, such as "openssl_software_foundation" for open SSL or sudo_project for sudo

I've looked into GetByCpeURI->UnbindURI in the code, also tried a lot of different combinations, but always get either empty array, or Internal Server Error, or invalid character '*' in string escape code"

There is also no examples of a wildcard in the db_test.go

Could you please tell me if it is possible to use a wildcard and provide an example?

@dmitry84
Copy link
Author

dmitry84 commented Feb 8, 2021

update:
it would be also ok if I can omit the vendor param and use only the package name and version
like: '{"name": "cpe:/a:--nothing-here-:sudo:version#:-"}'

Could you tell me if it is possible?

@kotakanbe
Copy link
Collaborator

This is not supported in the current implementation, but can be done by changing the implementation.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants