aboutcode-org / aboutcode-org/vulnerablecode

Incomplete reference collection in Metasploit ( missing affected/fixed commits )

Open
#1,991 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
702
Forks
328
Avg merge
3d 8h
Merged PRs (30d)
3

Description

https://github.com/aboutcode-org/vulnerablecode/blob/dcb0511c73283654ab8a4ca340b71d6d9c5a16b9/vulnerabilities/pipelines/enhance_with_metasploit.py#L73

https://public.vulnerablecode.io/vulnerabilities/VCID-5drb-ng7e-aaaj?search=CVE-2013-0233
Missing a commit fix like this: **https://github.com/rails/rails/commit/26e13c3ca71cbc7859cc4c51e64f3981865985d8**

```
"references": [
"CVE-2013-0233",
"OSVDB-89642",
"BID-57577",
"URL-http://blog.plataformatec.com.br/2013/01/security-announcement-devise-v2-2-3-v2-1-3-v2-0-5-and-v1-5-3-released/",
"URL-http://www.phenoelit.org/blog/archives/2013/02/05/mysql_madness_and_rails/index.html",
"URL-https://github.com/rails/rails/commit/921a296a3390192a71abeec6d9a035cc6d1865c8",
"URL-https://github.com/rails/rails/commit/26e13c3ca71cbc7859cc4c51e64f3981865985d8"
],

```

- Related issue: #1697

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.