{ "openapi": "3.0.0", "info": { "version": "1.0.0", "title": "CVE Plugin API" }, "tags": [ { "name": "language", "description": "en" } ], "servers": [ { "url": "https://chatgpt.cve.ai.moda", "description": "Production server" } ], "components": { "schemas": {}, "parameters": {} }, "paths": { "/api/v1.0.0/cves/{cve}": { "get": { "operationId": "getCVE", "parameters": [ { "schema": { "type": "string", "minLength": 13, "example": "CVE-2022-2007" }, "required": true, "name": "cve", "in": "path" } ], "responses": { "200": { "description": "Retrieve info about the CVE", "content": { "application/json": { "schema": { "type": "object", "properties": { "dataType": { "type": "string", "example": "CVE_RECORD" }, "dataVersion": { "type": "string", "example": "5.0" }, "cveMetadata": { "type": "object", "properties": { "cveId": { "type": "string", "example": "CVE-1337-1234" }, "assignerOrgId": { "type": "string", "example": "b3476cb9-2e3d-41a6-98d0-0f47421a65b6" }, "assignerShortName": { "type": "string", "example": "example" }, "requesterUserId": { "type": "string", "example": "b3476cb9-2e3d-41a6-98d0-0f47421a65b6" }, "serial": { "type": "number", "example": 1 }, "state": { "type": "string", "example": "PUBLISHED" } }, "required": [ "cveId", "assignerOrgId", "assignerShortName", "requesterUserId", "serial", "state" ] }, "containers": { "type": "object", "properties": { "cna": { "type": "object", "properties": { "providerMetadata": { "type": "object", "properties": { "orgId": { "type": "string", "example": "b3476cb9-2e3d-41a6-98d0-0f47421a65b6" }, "shortName": { "type": "string", "example": "example" }, "dateUpdated": { "type": "string", "example": "2021-09-08T16:24:00.000Z" } }, "required": [ "orgId", "shortName", "dateUpdated" ] }, "title": { "type": "string", "example": "Buffer overflow in Example Enterprise allows Privilege Escalation." }, "datePublic": { "type": "string", "example": "2021-09-08T16:24:00.000Z" }, "problemTypes": { "type": "array", "items": { "type": "object", "properties": { "descriptions": { "type": "array", "items": { "type": "object", "properties": { "lang": { "type": "string", "example": "en" }, "cweId": { "type": "string", "example": "CWE-78" }, "description": { "type": "string", "example": "CWE-78 OS Command Injection" }, "type": { "type": "string", "example": "CWE" } }, "required": [ "lang", "description" ] } } }, "required": [ "descriptions" ] } }, "impacts": { "type": "array", "items": { "type": "object", "properties": { "capecId": { "type": "string", "example": "CAPEC-233" }, "descriptions": { "type": "array", "items": { "type": "object", "properties": { "lang": { "type": "string", "example": "en" }, "value": { "type": "string", "example": "CAPEC-233 Privilege Escalation" } }, "required": [ "lang", "value" ] } } }, "required": [ "descriptions" ] } }, "affected": { "type": "array", "items": { "type": "object", "properties": { "vendor": { "type": "string", "example": "Example.org" }, "product": { "type": "string", "example": "Example Enterprise" }, "platforms": { "type": "array", "items": { "type": "string" }, "example": [ "Windows", "MacOS", "XT-4500" ] }, "collectionURL": { "type": "string", "example": "https://example.org/packages" }, "packageName": { "type": "string", "example": "example_enterprise" }, "repo": { "type": "string", "example": "git://example.org/source/example_enterprise" }, "modules": { "type": "array", "items": { "type": "string" }, "example": [ "Web-Management-Interface" ] }, "programFiles": { "type": "array", "items": { "type": "string" }, "example": [ "example_enterprise/example.php" ] }, "programRoutines": { "type": "array", "items": { "type": "object", "properties": { "name": { "type": "string", "example": "parseFilename" } }, "required": [ "name" ] } }, "versions": { "type": "array", "items": { "type": "object", "properties": { "version": { "type": "string", "example": "1.0.0" }, "status": { "type": "string", "example": "affected" }, "lessThan": { "type": "string", "example": "1.0.6" }, "versionType": { "type": "string", "example": "semver" }, "changes": { "type": "array", "items": { "type": "object", "properties": { "at": { "type": "string", "example": "2.1.6" }, "status": { "type": "string", "example": "affected" } }, "required": [ "at", "status" ] } } }, "required": [ "version", "status" ] } }, "defaultStatus": { "type": "string", "example": "unaffected" } }, "required": [ "vendor", "product", "versions" ] } }, "descriptions": { "type": "array", "items": { "type": "object", "properties": { "lang": { "type": "string", "example": "en" }, "value": { "type": "string", "example": "OS Command Injection vulnerability parseFilename function of example.php in the Web Management Interface of Example.org Example Enterprise on Windows, macOS, and XT-4500 allows remote unauthenticated attackers to escalate privileges." }, "supportingMedia": { "type": "array", "items": { "type": "object", "properties": { "type": { "type": "string", "example": "text/html" }, "base64": { "type": "boolean", "example": false }, "value": { "type": "string", "example": "OS Command Injection vulnerability parseFilename function of example.php in the Web Management Interface of Example.org Example Enterprise on Windows, macOS, and XT-4500 allows remote unauthenticated attackers to escalate privileges.

This issue affects:

1.0 versions before 1.0.6
2.1 versions from 2.16 until 2.1.9.

" } }, "required": [ "type", "base64", "value" ] } } }, "required": [ "lang", "value" ] } }, "metrics": { "type": "array", "items": { "type": "object", "properties": { "format": { "type": "string", "example": "CVSS" }, "scenarios": { "type": "array", "items": { "type": "object", "properties": { "lang": { "type": "string", "example": "en" }, "value": { "type": "string", "example": "GENERAL" } }, "required": [ "lang", "value" ] } }, "cvssV3_1": { "type": "object", "properties": { "version": { "type": "string", "example": "3.1" }, "attackVector": { "type": "string", "example": "NETWORK" }, "attackComplexity": { "type": "string", "example": "LOW" }, "privilegesRequired": { "type": "string", "example": "NONE" }, "userInteraction": { "type": "string", "example": "NONE" }, "scope": { "type": "string", "example": "UNCHANGED" }, "confidentialityImpact": { "type": "string", "example": "HIGH" }, "integrityImpact": { "type": "string", "example": "HIGH" }, "availabilityImpact": { "type": "string", "example": "HIGH" }, "baseScore": { "type": "number", "example": 9.8 }, "baseSeverity": { "type": "string", "example": "CRITICAL" }, "vectorString": { "type": "string", "example": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } }, "required": [ "version", "attackVector", "attackComplexity", "privilegesRequired", "userInteraction", "scope", "confidentialityImpact", "integrityImpact", "availabilityImpact", "baseScore", "baseSeverity", "vectorString" ] } }, "required": [ "format", "scenarios", "cvssV3_1" ] } }, "solutions": { "type": "array", "items": { "type": "object", "properties": { "lang": { "type": "string", "example": "en" }, "value": { "type": "string", "example": "This issue is fixed in 1.0.6, 2.1.9, and 3.0.0 and all later versions." }, "supportingMedia": { "type": "array", "items": { "type": "object", "properties": { "type": { "type": "string", "example": "text/html" }, "base64": { "type": "boolean", "example": false }, "value": { "type": "string", "example": "This issue is fixed in 1.0.6, 2.1.9, and 3.0.0 and all later versions." } }, "required": [ "type", "base64", "value" ] } } }, "required": [ "lang", "value" ] } }, "workarounds": { "type": "array", "items": { "type": "object", "properties": { "lang": { "type": "string", "example": "en" }, "value": { "type": "string", "example": "Disable the web management interface with the command\n> service disable webmgmt" }, "supportingMedia": { "type": "array", "items": { "type": "object", "properties": { "type": { "type": "string", "example": "text/html" }, "base64": { "type": "boolean", "example": false }, "value": { "type": "string", "example": "Disable the web management interface with the command

> service disable webmgmt

" } }, "required": [ "type", "base64", "value" ] } } }, "required": [ "lang", "value" ] } }, "configurations": { "type": "array", "items": { "type": "object", "properties": { "lang": { "type": "string", "example": "en" }, "value": { "type": "string", "example": "Web management interface should be enabled.\n> service status webmgmt\nwebmgmt running" }, "supportingMedia": { "type": "array", "items": { "type": "object", "properties": { "type": { "type": "string", "example": "text/html" }, "base64": { "type": "boolean", "example": false }, "value": { "type": "string", "example": "Web management interface should be enabled.

> service status webmgmt
webmgmt running

" } }, "required": [ "type", "base64", "value" ] } } }, "required": [ "lang", "value" ] } }, "exploits": { "type": "array", "items": { "type": "object", "properties": { "lang": { "type": "string", "example": "en" }, "value": { "type": "string", "example": "Example.org is not aware of any malicious exploitation of the issue however exploits targeting this issue are publicly available." }, "supportingMedia": { "type": "array", "items": { "type": "object", "properties": { "type": { "type": "string", "example": "text/html" }, "base64": { "type": "boolean", "example": false }, "value": { "type": "string", "example": "Example.org is not aware of any malicious exploitation of the issue however exploits targeting this issue are publicly available." } }, "required": [ "type", "base64", "value" ] } } }, "required": [ "lang", "value" ] } }, "timeline": { "type": "array", "items": { "type": "object", "properties": { "time": { "type": "string", "example": "2001-09-01T07:31:00.000Z" }, "lang": { "type": "string", "example": "en" }, "value": { "type": "string", "example": "Issue discovered by Alice using Acme Autofuzz" } }, "required": [ "time", "lang", "value" ] } }, "credits": { "type": "array", "items": { "type": "object", "properties": { "lang": { "type": "string", "example": "en" }, "value": { "type": "string", "example": "Alice" }, "type": { "type": "string", "example": "finder" } }, "required": [ "lang", "value", "type" ] } }, "references": { "type": "array", "items": { "type": "object", "properties": { "url": { "type": "string", "example": "https://example.org/ESA-22-11-CVE-1337-1234" }, "name": { "type": "string", "example": "ESA-22-11" }, "tags": { "type": "array", "items": { "type": "string" }, "example": [ "vendor-advisory" ] } }, "required": [ "url" ] } }, "source": { "type": "object", "properties": { "defects": { "type": "array", "items": { "type": "string" }, "example": [ "EXAMPLE-1234" ] }, "advisory": { "type": "string", "example": "ESA-22-11" }, "discovery": { "type": "string", "example": "EXTERNAL" } } }, "taxonomyMappings": { "type": "array", "items": { "type": "object", "properties": { "taxonomyName": { "type": "string", "example": "ATT&CK" }, "taxonomyVersion": { "type": "string", "example": "v9" }, "taxonomyRelations": { "type": "array", "items": { "type": "object", "properties": { "taxonomyId": { "type": "string", "example": "T1190" }, "relationshipName": { "type": "string", "example": "mitigated by" }, "relationshipValue": { "type": "string", "example": "M1048" } }, "required": [ "taxonomyId", "relationshipName", "relationshipValue" ] } } }, "required": [ "taxonomyName" ] } } }, "required": [ "providerMetadata", "title", "datePublic", "problemTypes", "impacts", "affected", "descriptions", "metrics", "solutions", "workarounds", "configurations", "exploits", "timeline", "credits", "references", "source", "taxonomyMappings" ] } }, "required": [ "cna" ] } }, "required": [ "dataType", "dataVersion", "cveMetadata", "containers" ] } } } }, "404": { "description": "CVE not found" } } } } } }