CRAVEX: Vulnerability exploitability: Cross product queries

[pombredanne]

Query for the affected vulnerable package version presence across multiple products, create UI and API accordingly.

[DennisClark]

Refer to issue https://github.com/nexB/dejacode/issues/94 for discussion of model enhancements required to support this feature.

[pombredanne]

This Web UI is now completed, I can navigate across products through vulnerabilities and packages. Starting from vulnerabilities/?sort=-affected_products_count I can drill to products that are affected to packages and navigate back

[tdruez]

REST API changes from https://github.com/aboutcode-org/dejacode/pull/203

Endpoints:

• Add vulnerabilities/ endpoint
• Add risk_score and affected_by_vulnerabilities field in Package endpoint
• Add vulnerability_analyses field in Product and ProductPackage endpoints

Filters:

• Add is_vulnerable and affected_by filters in Product, Package, and ProductPackage endpoints
• Add risk_score filter in Package endpoint

---

You can now make "Cross product queries" in the REST API for a given vulnerability using: /api/v2/products/?affected_by=VCID-c94m-sbts-aaae