tests/test_cve.py


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40

import pytest

from sec_certs.dataset.cve import CVEDataset
from sec_certs.sample.cve import CVE


class TestCVE:
    @pytest.mark.slow
    @pytest.mark.monitor_test
    def test_from_web(self):
        dset = CVEDataset.from_web()
        assert dset is not None
        assert "CVE-2019-15809" in dset.cves
        assert "CVE-2017-15361" in dset.cves

    def test_from_to_dict(self):
        data = {
            "cve_id": "CVE-1999-0001",
            "vulnerable_cpes": [
                {
                    "uri": "cpe:2.3:o:freebsd:freebsd:1.0:*:*:*:*:*:*:*",
                    "title": None,
                    "start_version": None,
                    "end_version": None,
                }
            ],
            "impact": {
                "_type": "Impact",
                "base_score": 5,
                "severity": "MEDIUM",
                "explotability_score": 10,
                "impact_score": 2.9,
            },
            "published_date": "1999-12-30T05:00:00+00:00",
        }
        cve = CVE.from_dict(data)
        ret = cve.to_dict()
        assert ret == data
        other_cve = CVE.from_dict(ret)
        assert cve == other_cve