<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# CVE Detection Templates — API Reference

## Nuclei CVE Scanning Options

```bash
# Scan with specific CVE template
nuclei -u https://target.com -t cve-template.yaml -json

# Filter by CVE tag
nuclei -u https://target.com -tags cve,cve2024 -json

# Scan with CVSS severity filter
nuclei -u https://target.com -t cves/ -severity critical,high -json

# Bulk scan with CVE templates
nuclei -l targets.txt -t cves/ -json -o results.json
```

## CVE Classification Fields

| Field | Type | Description |
|-------|------|-------------|
| `cve-id` | string | CVE identifier (e.g., CVE-2024-23897) |
| `cwe-id` | string | CWE weakness class (e.g., CWE-89) |
| `cvss-metrics` | string | CVSS v3.1 vector string |
| `cvss-score` | float | CVSS base score (0.0–10.0) |

## Info Block Metadata

| Field | Type | Description |
|-------|------|-------------|
| `verified` | bool | Template verified against live target |
| `max-request` | int | Total HTTP requests the template sends |
| `shodan-query` | string | Shodan dork to find targets |
| `fofa-query` | string | FOFA query to find targets |

## Chained Request Fields

| Field | Type | Description |
|-------|------|-------------|
| `internal` | bool | Mark matcher/extractor for internal use only |
| `name` | string | Named extractor for cross-request reference |
| `req-condition` | bool | Enable cross-request condition matching |

## Version Fingerprinting Extractors

| Type | Usage | Description |
|------|-------|-------------|
| `regex` | `group: 1` | Capture version from response body |
| `kval` | `kval: [server]` | Extract server header value |
| `json` | JQ path | Extract version from JSON API response |
| `xpath` | XPath expr | Extract version from HTML meta tags |

## CVSS v3.1 Severity Mapping

| Score Range | Severity |
|-------------|----------|
| 0.0 | None |
| 0.1–3.9 | Low |
| 4.0–6.9 | Medium |
| 7.0–8.9 | High |
| 9.0–10.0 | Critical |
