{% extends "base.html" %}
{% load static %}
{% load humanize %}
{% load opencve_extras %}

{% block title %}{{ cve.cve_id }} - Vulnerability Details - OpenCVE{% endblock %}

{% block meta_description %}{{ cve.description }}{% endblock %}

{% block navbar_title%}<a href="{% url 'cve' cve_id=cve.cve_id %}" class="navbar-title-cve-link">{{ cve.cve_id }}</a>{% if cve.title %}<small><i> - {{ cve.title }}</i></small>{% endif %}{% endblock %}

{% block content %}

<section class="content">
    <div class="row">
        <div class="col-md-9">
            <div class="cve-description-summary-wrapper" id="cve-overview">
                <div class="row cve-description-summary-row">
                    <div class="col-md-8 cve-description-col">
                        {% include "cves/includes/description.html" %}
                    </div>
                    <div class="col-md-4 cve-summary-col">
                        {% include "cves/includes/summary.html" %}
                    </div>
                </div>
            </div>

            {% include "cves/includes/analysis.html" %}

            {% include "cves/includes/vendors_products.html" %}

            {% include "cves/includes/remediation.html" %}

            {% include "cves/includes/tracking.html" %}

            {% include "cves/includes/advisories.html" %}

            {% include "cves/metrics/base.html" %}

            {% include "cves/includes/references.html" %}

            {% include "cves/includes/history.html" %}
        </div>

        <div class="col-md-3">
            {% include "cves/includes/section_nav.html" %}

            {% if user.is_authenticated %}
            <div class="box box-primary">
                <div class="box-header">
                    <h3 class="box-title">Tags</h3>
                    <div class="box-tools pull-right">
                        <button type="button" class="btn btn-box-tool" data-toggle="modal" data-target="#modal-tags"><i class="fa fa-edit"></i></button>
                    </div>
                </div>
                <div class="box-body">
                    {% if tags %}
                    {% for tag in tags %}
                    <a href="{% url 'cves' %}?tag={{ tag.name }}" data-toggle="tooltip" data-container="body" title="{{ tag.description }}">
                        <span class="label label-tag" style="background-color: {{ tag.color }};">{{ tag.name }}</span>
                    </a>
                    {% endfor %}
                    {% else %}
                    <p class="text-muted"><em>No tag found for this CVE.</em></p>
                    {% endif %}
                </div>
            </div>
            {% endif %}

            <div class="box box-primary" id="project-subscriptions-box">
                <div class="box-header">
                    <h3 class="box-title">Subscriptions</h3>
                </div>
                <div class="box-body project-subscriptions-body">
                    {% include "cves/includes/subscriptions.html" with vendors_dict=vendors vendors_data_dict=vendors_data %}
                </div>
            </div>
        </div>

        <div class="col-md-3">
            <div class="box box-primary">
                <div class="box-header">
                    <div class="box-title">
                        <img src="{% static 'img/cve-icon.png' %}" class="provider-icon" alt="cve-icon" />
                        MITRE
                    </div>
                    {% if cve.mitre_json %}
                    <div class="box-tools pull-right">
                        <div class="btn-group" data-toggle="btn-toggle">
                            <button type="button" class="btn btn-default btn-sm" data-toggle="modal" data-target="#modal-mitre-json"><i class="fa fa-code"></i></button>
                        </div>
                    </div>
                    {% endif %}
                </div>
                {% if cve.mitre_json %}
                <div class="box-body">
                    <p><strong>Status:</strong> {{ cve.mitre_json.cveMetadata.state }}</p>
                    <p><strong>Assigner:</strong> {{ cve.mitre_json.cveMetadata.assignerShortName }}</p>
                    <p><strong>Published:</strong>
                        {% if cve.mitre_json.cveMetadata.datePublished %}
                        <time datetime="{{ cve.mitre_json.cveMetadata.datePublished|convert_str_date|date:'Y-m-d\TH:i:s' }}">
                            {{ cve.mitre_json.cveMetadata.datePublished }}
                        </time>
                        {% else %}
                        No published date
                        {% endif %}
                    </p>
                    <p><strong>Updated:</strong> {{ cve.mitre_json.cveMetadata.dateUpdated }}</p>
                    <p><strong>Reserved:</strong> {{ cve.mitre_json.cveMetadata.dateReserved }}</p>
                    <p><strong>Link:</strong> <a href="https://www.cve.org/CVERecord?id={{ cve.cve_id }}" target="_blank">{{ cve.cve_id }} <i class="fa fa-external-link"></i></a></p>
                </div>
                {% else %}
                <div class="box-body">
                    <p class="text-muted"><em>No data.</em></p>
                </div>
                {% endif %}
            </div>

            <div class="box box-primary">
                <div class="box-header">
                    <div class="box-title">
                        <img src="{% static 'img/cisa-icon.png' %}" class="provider-icon" style="width: 28px;" alt="cve-icon" />
                        Vulnrichment
                    </div>
                    {% if cve.vulnrichment_json %}
                    <div class="box-tools pull-right">
                        <div class="btn-group" data-toggle="btn-toggle">
                            <button type="button" class="btn btn-default btn-sm" data-toggle="modal" data-target="#modal-vulnrichment-json"><i class="fa fa-code"></i></button>
                        </div>
                    </div>
                    {% endif %}
                </div>
                {% if cve.vulnrichment_json %}
                <div class="box-body">
                    <p><strong>Updated:</strong> {{ cve.vulnrichment_json.containers.adp.0.providerMetadata.dateUpdated }}</p>
                </div>
                {% else %}
                <div class="box-body">
                    <p class="text-muted"><em>No data.</em></p>
                </div>
                {% endif %}
            </div>

            <div class="box box-primary">
                <div class="box-header">
                    <div class="box-title">
                        <img src="{% static 'img/nvd-icon.png' %}" class="provider-icon" alt="cve-icon" />
                        NVD
                    </div>
                    {% if cve.nvd_json %}
                    <div class="box-tools pull-right">
                        <div class="btn-group" data-toggle="btn-toggle">
                            <button type="button" class="btn btn-default btn-sm" data-toggle="modal" data-target="#modal-nvd-json"><i class="fa fa-code"></i></button>
                        </div>
                    </div>
                    {% endif %}
                </div>
                {% if cve.nvd_json %}
                <div class="box-body">
                    <p><strong>Status :</strong> {{ cve.nvd_json.vulnStatus }}</p>
                    <p><strong>Published:</strong> {{ cve.nvd_json.published }}</p>
                    <p><strong>Modified:</strong> {{ cve.nvd_json.lastModified }}</p>
                    <p><strong>Link:</strong> <a href="https://nvd.nist.gov/vuln/detail/{{ cve.cve_id }}" target="_blank">{{ cve.cve_id }} <i class="fa fa-external-link"></i></a></p>
                </div>
                {% else %}
                <div class="box-body">
                    <p class="text-muted"><em>No data.</em></p>
                </div>
                {% endif %}
            </div>

            <div class="box box-primary">
                <div class="box-header">
                    <div class="box-title">
                        <img src="{% static 'img/redhat-icon.png' %}" class="provider-icon" style="width: 28px;" alt="cve-icon" />
                        Redhat
                    </div>
                    {% if cve.redhat_json %}
                    <div class="box-tools pull-right">
                        <div class="btn-group" data-toggle="btn-toggle">
                            <button type="button" class="btn btn-default btn-sm" data-toggle="modal" data-target="#modal-redhat-json"><i class="fa fa-code"></i></button>
                        </div>
                    </div>
                    {% endif %}
                </div>
                {% if cve.redhat_json %}
                <div class="box-body">
                    <p><strong>Severity :</strong> {{ cve.redhat_json.threat_severity }}</p>
                    <p><strong>Publid Date:</strong> {{ cve.redhat_json.public_date }}</p>
                    <p><strong>Links:</strong> <a href="https://access.redhat.com/security/cve/{{ cve.cve_id }}" target="_blank">{{ cve.cve_id }} <i class="fa fa-external-link"></i></a> - <a href="{{ cve.redhat_json.bugzilla.url }}" target="_blank">Bugzilla <i class="fa fa-bug"></i></a></p>
                </div>
                {% else %}
                <div class="box-body">
                    <p class="text-muted"><em>No data.</em></p>
                </div>
                {% endif %}
            </div>

            {% is_cve_rejected cve as cve_rejected %}
            <div class="box box-primary">
                <div class="box-header">
                    <div class="box-title">
                        <img src="{% static 'img/opencve_32.png' %}" class="provider-icon" style="width: 28px;" alt="cve-icon" />
                        OpenCVE Enrichment
                    </div>
                    {% if cve.enrichment_json and not cve_rejected %}
                    <div class="box-tools pull-right">
                        <div class="btn-group" data-toggle="btn-toggle">
                            <button type="button" class="btn btn-default btn-sm" data-toggle="modal" data-target="#modal-enrichment-json"><i class="fa fa-code"></i></button>
                        </div>
                    </div>
                    {% endif %}
                </div>
                {% if cve.enrichment_json and not cve_rejected %}
                <div class="box-body">
                    <p><strong>Updated:</strong> {{ cve.enrichment_json.updated|convert_str_date|date:"Y-m-d\TH:i:s" }}Z</p>
                </div>
                {% else %}
                <div class="box-body">
                    <p class="text-muted"><em>No data.</em></p>
                </div>
                {% endif %}
            </div>

            <div class="box box-primary">
                <div class="box-header">
                    <div class="box-title">Weaknesses</div>
                </div>
                <div class="box-body">
                    {% if weaknesses %}
                        <ul>
                        {% for cwe_id, name in weaknesses.items %}
                        <li>
                            <a href="{% url 'cves' %}?weakness={{ cwe_id }}">{{ cwe_id }}</a>
                            {% if name %}<p class="cwe-name">{{ name }}</p>{% endif %}
                        </li>
                        {% endfor %}
                        </ul>
                    {% else %}
                    <p class="text-muted"><em>No weakness.</em></p>
                    {% endif %}
                </div>
            </div>

        </div>
    </div>

</section>

<div class="modal fade" id="modal-mitre-json">
    <div class="modal-dialog modal-lg">
        <div class="modal-content">
            <div class="modal-header">
                <button type="button" class="close" data-dismiss="modal" aria-label="Close">
                    <span aria-hidden="true">&times;</span></button>
                <h4 class="modal-title">JSON object</h4>
            </div>
            <div class="modal-body codejson">
                {{ mitre_json }}
            </div>
            <div class="modal-footer">
                <button type="button" class="btn btn-default pull-right" data-dismiss="modal">Close</button>
            </div>
        </div>
    </div>
</div>

<div class="modal fade" id="modal-vulnrichment-json">
    <div class="modal-dialog modal-lg">
        <div class="modal-content">
            <div class="modal-header">
                <button type="button" class="close" data-dismiss="modal" aria-label="Close">
                    <span aria-hidden="true">&times;</span></button>
                <h4 class="modal-title">JSON object</h4>
            </div>
            <div class="modal-body codejson">
                {{ vulnrichment_json }}
            </div>
            <div class="modal-footer">
                <button type="button" class="btn btn-default pull-right" data-dismiss="modal">Close</button>
            </div>
        </div>
    </div>
</div>

<div class="modal fade" id="modal-nvd-json">
    <div class="modal-dialog modal-lg">
        <div class="modal-content">
            <div class="modal-header">
                <button type="button" class="close" data-dismiss="modal" aria-label="Close">
                    <span aria-hidden="true">&times;</span></button>
                <h4 class="modal-title">JSON object</h4>
            </div>
            <div class="modal-body codejson">
                {{ nvd_json }}
            </div>
            <div class="modal-footer">
                <button type="button" class="btn btn-default pull-right" data-dismiss="modal">Close</button>
            </div>
        </div>
    </div>
</div>

<div class="modal fade" id="modal-redhat-json">
    <div class="modal-dialog modal-lg">
        <div class="modal-content">
            <div class="modal-header">
                <button type="button" class="close" data-dismiss="modal" aria-label="Close">
                    <span aria-hidden="true">&times;</span></button>
                <h4 class="modal-title">JSON object</h4>
            </div>
            <div class="modal-body codejson">
                {{ redhat_json }}
            </div>
            <div class="modal-footer">
                <button type="button" class="btn btn-default pull-right" data-dismiss="modal">Close</button>
            </div>
        </div>
    </div>
</div>

<div class="modal fade" id="modal-enrichment-json">
    <div class="modal-dialog modal-lg">
        <div class="modal-content">
            <div class="modal-header">
                <button type="button" class="close" data-dismiss="modal" aria-label="Close">
                    <span aria-hidden="true">&times;</span></button>
                <h4 class="modal-title">JSON object</h4>
            </div>
            <div class="modal-body codejson">
                {{ enrichment_json }}
            </div>
            <div class="modal-footer">
                <button type="button" class="btn btn-default pull-right" data-dismiss="modal">Close</button>
            </div>
        </div>
    </div>
</div>


{% if user.is_authenticated %}
<div class="modal fade" id="modal-tags">
    <div class="modal-dialog">
      <div class="modal-content">
        <form action="{% url 'cve' cve_id=cve.cve_id %}" method="POST">
            {% csrf_token %}
            <div class="modal-header">
            <button type="button" class="close" data-dismiss="modal" aria-label="Close">
                <span aria-hidden="true">&times;</span></button>
            <h4 class="modal-title">Attach tags to <code>{{ cve.cve_id }}</code></h4>
            </div>
            <div class="modal-body">
                <div class="form-group">
                    <label>Select your tags</label>
                    <select class="form-control select2" id="select2-tags" multiple="multiple" data-placeholder="Select a tag"
                            style="width: 100%;" data-values='{{ cve_tags_encoded }}' name="tags">
                        {% for tag in user_tags %}
                        <option>{{ tag }}</option>
                        {% endfor %}
                    </select>
                </div>
            </div>
            <div class="modal-footer">
                <button type="button" class="btn btn-default pull-left" data-dismiss="modal">Close</button>
                <a class="btn btn-default pull-left" href="{% url 'tags' %}">Manage your tags</a>
                <button type="submit" class="btn btn-primary">Update associated tags</button>
            </div>
        </form>
      </div>
    </div>
</div>
{% endif %}

{% if user.is_authenticated and projects_json %}
<div class="modal fade" id="modal-delete-comment">
    <div class="modal-dialog">
      <div class="modal-content">
            <div class="modal-header">
                <button type="button" class="close" data-dismiss="modal" aria-label="Close">
                    <span aria-hidden="true">&times;</span></button>
                <h4 class="modal-title">Delete comment</h4>
            </div>
            <div class="modal-body">
                <p>Are you sure you want to delete this comment?</p>
            </div>
            <div class="modal-footer">
                <button type="button" class="btn btn-default pull-left" data-dismiss="modal">Cancel</button>
                <button type="button" class="btn btn-danger" id="confirm-delete-comment">Delete</button>
            </div>
      </div>
    </div>
</div>

<script>
window.vendorSubscriptionData = {
    projects: {{ projects_json|safe }},
    url: "{% url 'subscribe' %}"
};
</script>
{% endif %}

{% if user.is_authenticated and filtered_projects %}
<script>
window.cveTrackingData = {
    assignableMembersByProject: {
        {% for project_data in filtered_projects %}
        "{{ project_data.project.name|escapejs }}": [
            {% for member in project_data.assignable_members %}
            {
                id: "{{ member.id }}",
                username: "{{ member.username|escapejs }}",
                email: "{{ member.email|escapejs }}"
            }{% if not forloop.last %},{% endif %}
            {% endfor %}
        ]{% if not forloop.last %},{% endif %}
        {% endfor %}
    },
    statusChoices: [
        {% for status_key, status_label in status_choices %}
        {
            key: "{{ status_key|escapejs }}",
            label: "{{ status_label|escapejs }}"
        }{% if not forloop.last %},{% endif %}
        {% endfor %}
    ],
};
</script>
{% endif %}

{% endblock %}