Skip to content

Commit 4723148

Browse files
author
Luc Gommans (X41)
committed
m. improve inexact cve match text
1 parent cee1814 commit 4723148

3 files changed

Lines changed: 3 additions & 3 deletions

File tree

BurpExtender.java

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -474,8 +474,8 @@ public void run() {
474474
}
475475

476476
if (any_uncertain_cves) {
477-
issuetext += "<br>* These CVEs apply to some versions of the product and may not apply to the version(s) found. We can only do exact version matches and not range "
478-
+ "comparisons because the version scheme is unknown (e.g. it could be that 1.81 is patch release 1 of version 1.8, or it could be that 1.81 comes after 1.9).";
477+
issuetext += "<br>* This CVE applies to a range of versions. Many projects use non-semver versioning schemes and CVEs do not mention which versioning scheme "
478+
+ "is used, so we can only do reliable version matching when an exact version is given instead of a range. Therefore, this CVE may not apply.";
479479
}
480480

481481
if (notice.equals("") && GlobalVars.config.getString("apikey").length() <= 4) {

GlobalVars.java

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ class GlobalVars {
1111
public static final String USER_AGENT = "X41-BeanStack-BApp";
1212
public static final String EXTENSION_NAME = "X41 BeanStack (beta)";
1313
public static final String EXTENSION_NAME_SHORT = "BeanStack";
14-
public static final String VERSION = "0.4.4";
14+
public static final String VERSION = "0.4.5";
1515
public static final String REGURL = "https://beanstack.io";
1616
public static final String SETTINGDOCURL = "https://beanstack.io/settings.html";
1717
public static final String CVEURL = "https://nvd.nist.gov/vuln/detail/";

build/libs/beanstack.jar

0 Bytes
Binary file not shown.

0 commit comments

Comments
 (0)