Add extract_cve_from_tag to Shadowserver parser _config.py

intelmq/bots/parsers/shadowserver/_config.py

@@ -290,6 +290,20 @@ def category_or_detail(value: str, row: Dict[str, str]) -> str:
     return row.get('detail', '')
 
 
+def extract_cve_from_tag(tag: str) -> Optional[str]:
+    """ Returns a string with a sorted comma-separated list of CVEs or None if no CVE found in tag. """
+    cveset = set()
+    tags = tag.split(";")
+
+    for t in tags:
+        if re.match('^cve-[0-9]+-[0-9]+$', t):
+            cveset.add(t)
+
+    if not (len(cveset)):
+        return None;
+    return (','.join(str(c) for c in sorted(cveset)))
+
+
 functions = {
     'add_UTC_to_timestamp': add_UTC_to_timestamp,
     'convert_bool': convert_bool,