Skip to content

Commit 573ab0b

Browse files
Fix CVE-2020-13283 matching (#170)
The rule generated was too lax `>=10.8` https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13283.json I'll file a bug so that we update the CVE DB update to have fixups routines and/or use the Gitlab CVE assignement DB for Gitlab (https://gitlab.com/gitlab-org/cves/-/tree/master) Signed-off-by: François Proulx <[email protected]>
1 parent b833ac6 commit 573ab0b

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

Diff for: opa/rego/external/build_platform.rego

+5-1
Original file line numberDiff line numberDiff line change
@@ -937,7 +937,11 @@ advisories = {
937937
}],
938938
"cwe_ids": [""],
939939
"vulnerable_versions": [],
940-
"vulnerable_version_ranges": [">=10.8"],
940+
"vulnerable_version_ranges": [
941+
">=10.8, <13.0.12",
942+
">=13.1, <13.1.6",
943+
">=13.2, <13.2.3",
944+
],
941945
"vulnerable_commit_shas": [],
942946
},
943947
"CVE-2020-13284": {

0 commit comments

Comments
 (0)