fix: Tranform into UTC the last modified date from database (#7222)

Co-authored-by: Jeremy Long <jeremy.long@gmail.com>
jeremylong · Dec 4, 2024 · 97c3cee · 97c3cee
1 parent 1c0f6d4
commit 97c3cee
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/core/src/main/java/org/owasp/dependencycheck/data/update/NvdApiDataSource.java b/core/src/main/java/org/owasp/dependencycheck/data/update/NvdApiDataSource.java
@@ -306,7 +306,9 @@ private boolean processApi() throws UpdateException {
             builder.withEndpoint(endpoint);
         }
         if (lastModifiedRequest != null) {
-            final ZonedDateTime end = lastModifiedRequest.minusDays(-120);
+            // make it UTC as required by NvdCveClientBuilder#withLastModifiedFilter
+            lastModifiedRequest = lastModifiedRequest.withZoneSameInstant(ZoneId.of("UTC"));
+            final ZonedDateTime end = lastModifiedRequest.plusDays(120);
             builder.withLastModifiedFilter(lastModifiedRequest, end);
         }
         final String key = settings.getString(Settings.KEYS.NVD_API_KEY);