CVE by id

Frammenti di codice

curl "https://api.oanor.com/cve-api/v1/cve" \
  -H "x-oanor-key: oanor_test_..."

await fetch("https://api.oanor.com/cve-api/v1/cve", {
  headers: { "x-oanor-key": "oanor_test_..." }
});

$ch = curl_init("https://api.oanor.com/cve-api/v1/cve");
curl_setopt($ch, CURLOPT_HTTPHEADER, ["x-oanor-key: oanor_test_..."]);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$out = curl_exec($ch);

import requests
requests.get(
    "https://api.oanor.com/cve-api/v1/cve",
    headers={"x-oanor-key": "oanor_test_..."}
)

Risposta di esempio

Una risposta reale di questo endpoint, acquisita dall'ultimo health check.

{
    "data": {
        "id": "CVE-2021-44228",
        "cwe": [
            {
                "id": "CWE-502",
                "name": "CWE-502 Deserialization of Untrusted Data"
            },
            {
                "id": "CWE-400",
                "name": "CWE-400 Uncontrolled Resource Consumption"
            },
            {
                "id": "CWE-20",
                "name": "CWE-20 Improper Input Validation"
            }
        ],
        "url": "https://www.cve.org/CVERecord?id=CVE-2021-44228",
        "cvss": {
            "score": 10,
            "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "V3.1",
            "severity": "CRITICAL"
        },
        "state": "PUBLISHED",
        "title": "Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints",
        "updated": "2025-10-21T23:25:23.121Z",
        "affected": [
            {
                "vendor": "Apache Software Foundation",
                "product": "Apache Log4j2",
                "versions": [
                    "2.0-beta9"
                ]
            }
        ],
        "assigner": "apache",
        "published": "2021-12-10T00:00:00.000Z",
        "references": [
            "https://logging.apache.org/log4j/2.x/security.html",
            "http://www.openwall.com/lists/oss-security/2021/12/10/1",
            "http://www.openwall.com/lists/oss-security/2021/12/10/2",
            "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd",
            "http://www.openwall.com/lists/oss-security/2021/12/10/3",
            "https://security.netapp.com/advisory/ntap-20211210-0007/",
            "http://packetstormsecurity.com/files/165225/Apache-Log4j2-2.14.1-Remote-Code-Execution.html",
            "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032",
            "https://www.oracle.com/security-alerts/alert-cve-2021-44228.html",
            "https://www.debian.org/security/2021/dsa-5020",
            "https://lists.debian.org/debian-lts-announce/2021/12/msg00007.html",
            "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VU57UJDCFIASIO35GC55JMKSRXJMCDFM/",
            "https://msrc-blog.microsoft.com/2021/12/11/microsofts-response-to-cve-2021-44228-apache-log4j2/",
            "http://www.openwall.com/lists/oss-security/2021/12/13/2",
            "http://www.openwall.com/lists/oss-security/2021/12/13/1",
            "http://www.openwall.com/lists/oss-security/2021/12/14/4",
            "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd",
            "https://www.kb.cert.org/vuls/id/930724",
            "https://twitter.com/kurtseifried/status/1469345530182455296",
            "https://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdf",
            "http://packetstormsecurity.com/files/165260/VMware-Securi
…