Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Request: Ability to add (private) user comments, sticky note, reminder text to a CVE #343

Open
MalfuncEddie opened this issue Feb 21, 2024 · 0 comments

Comments

@MalfuncEddie
Copy link

Is your feature request related to a problem?
Feature:

It would be nice if a user could add some limited commentary to a cve. The easiest would be that the comment is private only to the user. Maybe it could be expanded in the future that the comment is visible to a group of users.

Use case:

  1. Receive notification of a CVE
  2. I analyze it and come to the conclusion that it is not present in the environment.
  3. <insert a "rough weekend">
  4. CVE gets updated
  5. I analyze it and come to the conclusion that it is not present in the environment but forgot I already did this.

With the ability to a (private) comment to the cve:

  1. Receive notification of a CVE:
  2. I analyze it and come to the conclusion that it is not present in the environment.
  3. Set a note "not present in my environment"
  4. CVE gets updated
  5. See I have a comment

Current "work around" (not invented by me) is a shared excel file where you enter the cve number and comment column.

Do you have a solution in mind, or a suggestion to improve OpenCVE?

I think (with my limited Django knowledge) that when you add a class CveComment(BaseModel): to
https://github.com/opencve/opencve/blob/dev/ncrocfer/v2/web/users/models.py

It should work on the backend part.
When V2 is released I will try to modify it and see how far I can get.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant