Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
28 changes: 11 additions & 17 deletions SECURITY.md
Original file line number Diff line number Diff line change
@@ -1,22 +1,16 @@
# Security Policy

## Reporting a Vulnerability
Please use the <a href="https://cveform.mitre.org/" target="_blank">CVE Program web forms</a> to report security vulnerabilities for the
<a href="https://www.cve.org" target="_blank">CVE website</a>. Please include vulnerability details, steps to reproduce (e.g., proof-of-concept code,
screenshots) and an assessment of the impact in your report. We appreciate concise and high-quality reports.

## Web Form Submissions

* In the “Select a request type” drop down menu, please select “Other”
* Enter your email address in the space provided
* You may enter a PGP key if you prefer to encrypt your correspondence
* In the “Type of comment” drop down menu, please select “Issue”
* In the textbox labeled “Please provide your question, issue, comment, etc.” please start the message with the following information:
- First Line: “CVE Website Security Anomaly Report”
- Second Line: “Distribution: CVE Website Development Team”
- Third Line: "Description: [Free Text description of the anomaly]”
* Enter the Security code
* Click “Submit Request”
Please use the <a href="https://cveform.mitre.org/" target="_blank">CVE Program Web Forms</a> (choose “General Support”) to report security vulnerabilities for the
<a href="https://www.cve.org" target="_blank">CVE website</a>.

Please include:

* Vulnerability details
* Steps to reproduce (e.g., proof-of-concept code, screenshots)
* An assessment of the impact

We appreciate concise and high-quality reports.

## Scope

Expand All @@ -28,4 +22,4 @@ We will release fixes for verified security vulnerabilities. We expect to publis
<a href="https://github.com/CVEProject/cve-website/security/advisories" target="_blank">security advisories</a>.

## Coordination
We appreciate the opportunity to investigate and develop fixes before public disclosure, following coordinated vulnerability disclosure practices.
We appreciate the opportunity to investigate and develop fixes before public disclosure, following coordinated vulnerability disclosure practices.
4 changes: 2 additions & 2 deletions src/components/AdpVulnerabilityEnrichment.vue
Original file line number Diff line number Diff line change
Expand Up @@ -54,7 +54,7 @@
<th style="width: 20%; top: 0px">Automatable</th>
<th style="width: 10%; top: 0px">Technical Impact</th>
<th style="width: 10%; top: 0px">Version</th>
<th style="width: 20%; top: 0px">Date Accessed</th>
<th style="width: 20%; top: 0px">Date Assessed</th>
</tr>
</thead>
<tbody>
Expand All @@ -68,7 +68,7 @@
<td data-label="Automatable" style="width: 10%">{{ ssvc.automatable }}</td>
<td data-label="Technical Impact" style="width: 30%">{{ ssvc['technical impact'] }}</td>
<td data-label="Version" style="width: 10%">{{ ssvc.version }}</td>
<td data-label="Date Accessed" style="width: 30%">{{ ssvc.timestamp }}</td>
<td data-label="Date Assessed" style="width: 30%">{{ ssvc.timestamp }}</td>
</tr>
</tbody>
</table>
Expand Down
2 changes: 1 addition & 1 deletion src/stores/cveListSearch.js
Original file line number Diff line number Diff line change
Expand Up @@ -219,7 +219,7 @@ export const useCveListSearchStore = defineStore('cveListSearch ', {
},
async getSearchResults() {
this.isQueryingSearchService = true;
const searchUrl = `${import.meta.env.VITE_API_BASE_URL}${import.meta.env.VITE_LIST_SEARCH_PATH}`;
const searchUrl = 'https://dev.search.cve.org/webSearch';

this.resetResults();

Expand Down