Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

failure of search across description and CWE weakness name #3388

Open
ElectricNroff opened this issue Dec 27, 2024 · 0 comments
Open

failure of search across description and CWE weakness name #3388

ElectricNroff opened this issue Dec 27, 2024 · 0 comments

Comments

@ElectricNroff
Copy link

I had expected that search results would include CVE Records in which one keyword is found in the description and another keyword is found in the CWE weakness name. Instead, the result was "No search results found."

All of the CVE Record data had been in CVE Services for more than 10 hours before the search:
https://github.com/CVEProject/cvelistV5/blob/22117ae854f6093da003ae0167ba76205d891c92/cves/2024/56xxx/CVE-2024-56521.json#L40

tcpdf-3

I then made separate searches for tcpdf and certificate. I don't think the keywords were misspelled, because I typed "tcpdf certificate" each time, and then erased the part of the keyword phrase that was not applicable to my example.

CVE-2024-56521 is one of the search results when only the tcpdf keyword is used:
tcpdf-1

Searching for "certificate" finds some CVE Records, such as CVE-2024-9160, in which "certificate" is only present in the CWE weakness name, and is not found anywhere else in the CVE Record:
tcpdf-4

Also, a search for two keywords in CVE-2024-56521 succeeds if both of those keywords are in the description:
tcpdf-2

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: Needs Triage
Development

No branches or pull requests

1 participant