From 47b51b2d87518f948202ea8770011dcf8c19d959 Mon Sep 17 00:00:00 2001 From: bpmcdevitt Date: Thu, 29 Sep 2022 00:15:22 -0500 Subject: [PATCH] added a method to pull down just mozilla cpes from a cve --- .../mozilla_security_advisory_scraper.rb | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/tools/mozilla/security_advisory_scraper/mozilla_security_advisory_scraper.rb b/tools/mozilla/security_advisory_scraper/mozilla_security_advisory_scraper.rb index b7258f8..23df186 100644 --- a/tools/mozilla/security_advisory_scraper/mozilla_security_advisory_scraper.rb +++ b/tools/mozilla/security_advisory_scraper/mozilla_security_advisory_scraper.rb @@ -135,6 +135,15 @@ class MozillaSecurityAdvisoryScraper cpes = json.dig('matchStrings').map {|match_strings| match_strings.dig('matches')} end + def get_mozilla_cpes_from_cve(cve_id) + cve_cpes = cve_cpes_from_nvd(cve_id) + cve_cpes.flat_map do |cpe_configuration| + cpe_configuration.select do |cpe_hash| + cpe_hash.dig('cpeName').start_with?('cpe:2.3:a:mozilla') + end + end.map {|cpe_h| cpe_h.dig('cpeName')} + end + def product_name_to_cpe # todo: record cpe translation {