feat(detector/vuls2): fill title and summary

[MaineK00n]

If this Pull Request is work in progress, Add a prefix of “[WIP]” in the title.

What did you implement:

fill title and summary

Type of change

• Bug fix (non-breaking change which fixes an issue)

How Has This Been Tested?

$ cd ~
$ git clone https://github.com/vulsio/vuls-compare.git
$ cd vuls-compare/detection
$ go run main.go  ../testdata/9/2024-12-07T09-49-40+0900/vagrant.json vuls config.toml vuls.db
$ cat diff/cves.diff
======== [-before +after] =========
  models.VulnInfos{
  	"CVE-2007-4559": {
  		... // 2 identical fields
  		AffectedPackages: {{Name: "python-unversioned-command", FixedIn: "0:3.9.18-1.el9_3"}, {Name: "python3", FixedIn: "0:3.9.18-1.el9_3"}, {Name: "python3-libs", FixedIn: "0:3.9.18-1.el9_3"}, {Name: "python3-pip-wheel", FixedIn: "0:21.2.3-7.el9"}},
  		DistroAdvisories: {{AdvisoryID: "RHSA-2023:6324", Updated: s"1000-01-01 00:00:00 +0000 UTC"}},
  		CveContents: models.CveContents{
  			"redhat": {
  				{
  					Type:        "redhat",
  					CveID:       "CVE-2007-4559",
- 					Title:       "",
+ 					Title:       "python: tarfile module directory traversal",
- 					Summary:     "",
+ 					Summary:     "A flaw was found in the Python tarfile module. Extracting a crafted TAR archive with the tarfile.extract or tarfile.extractall functions could lead to a directory traversal vulnerability, resulting in overwrite of arbitrary files.",
  					Cvss2Score:  0,
  					Cvss2Vector: "",
  					... // 15 identical fields
  				},
  			},
  		},
  		Exploits:    nil,
  		Metasploits: nil,
  		... // 11 identical fields
  	},
  	"CVE-2015-20107": {
  		... // 2 identical fields
  		AffectedPackages: {{Name: "python-unversioned-command", FixedIn: "0:3.9.14-1.el9"}, {Name: "python3", FixedIn: "0:3.9.14-1.el9"}, {Name: "python3-libs", FixedIn: "0:3.9.14-1.el9"}},
  		DistroAdvisories: {{AdvisoryID: "RHSA-2022:8353", Updated: s"1000-01-01 00:00:00 +0000 UTC"}},
  		CveContents: models.CveContents{
  			"redhat": {
  				{
  					Type:        "redhat",
  					CveID:       "CVE-2015-20107",
- 					Title:       "",
+ 					Title:       "python: mailcap: findmatch() function does not sanitize the second argument",
- 					Summary:     "",
+ 					Summary:     "A command injection vulnerability was found in the Python mailcap module. The issue occurs due to not adding escape characters into the system mailcap file commands. This flaw allows attackers to inject shell commands into applications that call the mailca"...,
  					Cvss2Score:  0,
  					Cvss2Vector: "",
  					... // 15 identical fields
  				},
  			},
  		},
  		Exploits:    nil,
  		Metasploits: nil,
  		... // 11 identical fields
  	},
...

Checklist:

You don't have to satisfy all of the following.

• Write tests
• Write documentation
• Check that there aren't other open pull requests for the same issue/feature
• Format your source code by make fmt
• Pass the test by make test
• Provide verification config / commands
• Enable "Allow edits from maintainers" for this PR
• Update the messages below

Is this ready for review?: YES

Reference

[shino]

Thanks!!!