Automatically look up CVEs

[csgillespie]

Very quick POC - obviously needs tidying

library(httr)
library(jsonlite)

# Function to get CVE details from NVD
get_cve_details <- function(cve_id) {
  base_url <- "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId="
  url <- paste0(base_url, cve_id)
  
  (response <- GET(url))
  
  if (status_code(response) == 200) {
    (content <- content(response, "text", encoding = "UTF-8"))
    json_content <- fromJSON(content, flatten = TRUE)
    
    # Extract CVSS score and severity
    if (!is.null(json_content$vulnerabilities)) {
      return(json_content$vulnerabilities)
    }
    stop("Failed to retrieve CVE details")
  }
  }
  
  # Example usage
  cve_id <- "CVE-2019-1010218"
  cve_details <- get_cve_details(cve_id)
  print(cve_details)