Merge pull request #47 from pandatix/fix/cvssv4-prefix

Fix check CVSS v4.0 prefix
RedHatProductSecurity · Dec 1, 2023 · 8791cb2 · 8791cb2
2 parents 201eb28 + 9c75640
commit 8791cb2
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/app.js b/app.js
@@ -73,6 +73,11 @@ const app = Vue.createApp({
             this.resetSelected()
             metrics = vector.split("/")
             // Remove hash + CVSS v4.0 prefix
+            prefix = metrics[0].slice(1);
+            if (prefix != "CVSS:4.0") {
+                console.log("Error invalid vector, missing CVSS v4.0 prefix")
+                return
+            }
             metrics.shift()
 
             // Ensure compliance first