Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Search and view basic information for a reserved and rejected CVE ID #3394

Closed
athu-tran opened this issue Jan 3, 2025 · 0 comments · Fixed by #3397, #3398, #3399, #3400 or #3401
Closed

Search and view basic information for a reserved and rejected CVE ID #3394

athu-tran opened this issue Jan 3, 2025 · 0 comments · Fixed by #3397, #3398, #3399, #3400 or #3401
Assignees
Labels

Comments

@athu-tran
Copy link
Collaborator

athu-tran commented Jan 3, 2025

As a user, I want to search for reserved and rejected CVE ID and view it's basic information on the Search Results page. A CVE Program decision by the AWG in November 2024 agreed upon an approach to make reserved CVE ID information available to the public.

Acceptance criteria:
The 3 scenarios below shows the expected behavior for searching CVE IDs that is found:

  • "Search Results" is upgraded to page title
  • Either "CVE ID Found" or "CVE Record Found"
    • Help text update:
      • "CVE ID Found": The CVE ID below has no corresponding CVE Record. If you are searching for this CVE ID in other CVE Records, view the Other Results section below.
      • "CVE Record Found": View the CVE Record below. If you are searching for this CVE ID in other CVE Records, view the Other Results section below.
    • "CNA" field:
      • For case 1: Note the "owning_cna" is information is not publicly available.
      • For case 2 and 3: Note the "CNA" field displays the shortname as is.
    • Description
      • Reserved CVE ID: Blanket statement of "This ID has been reserved by a CNA and its corresponding record will be updated by the assigning CNA once details are available. Learn more about the Reserved state."
      • Rejected CVE ID/Record: What the CNA provided in the "rejectedReason" field"
  • Either "No search results found for..." (same behavior as before and shown in scenarios 1 and 2) or "Other results" with the same results list UI (shown in scenario 3)

Scenarios:

  1. Reserved CVE ID without a corresponding CVE Record
image
  1. Rejected CVE ID without a corresponding CVE Record
image
  1. Rejected CVE ID with a corresponding CVE Record
image
@athu-tran athu-tran self-assigned this Jan 3, 2025
@github-project-automation github-project-automation bot moved this to Needs Triage in CVE Website Backlog Jan 3, 2025
@athu-tran athu-tran linked a pull request Jan 3, 2025 that will close this issue
athu-tran added a commit that referenced this issue Jan 3, 2025
#3394 show reserved CVE ID on Search Results page
athu-tran added a commit that referenced this issue Jan 7, 2025
athu-tran added a commit that referenced this issue Jan 7, 2025
athu-tran added a commit that referenced this issue Jan 7, 2025
…how assigner and description on Search Results page and relabel Search Results as Other Results
@athu-tran athu-tran linked a pull request Jan 7, 2025 that will close this issue
athu-tran added a commit that referenced this issue Jan 7, 2025
#3394 update Search Results page with CVE ID found cases
athu-tran added a commit that referenced this issue Jan 7, 2025
@athu-tran athu-tran linked a pull request Jan 7, 2025 that will close this issue
athu-tran added a commit that referenced this issue Jan 7, 2025
@athu-tran athu-tran linked a pull request Jan 7, 2025 that will close this issue
athu-tran added a commit that referenced this issue Jan 7, 2025
#3394 only show assigner name for rejected CVE ID
athu-tran added a commit that referenced this issue Jan 7, 2025
#3394 show 'Other Results' if there are search results from /search e…
athu-tran added a commit that referenced this issue Jan 7, 2025
athu-tran added a commit that referenced this issue Jan 7, 2025
#3394 showing 'Other Results' and help text only when there is a CVE ID or Record found
@athu-tran athu-tran changed the title Show basic information for a reserved CVE ID Search and view basic information for a reserved and rejected CVE ID Jan 7, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment