-
Notifications
You must be signed in to change notification settings - Fork 79
VS-326/SYN-5379: Update $lib.infosec.cvss.calculate to support new CVSS props schemas and calculating v2.0 and v3.0 scores #3171
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
ghost
commented
Jun 7, 2023
- Added vectToScore which includes support for CVSS2, CVSS3.0, and CVSS3.1
- Added tests for new code
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
classes may be a bit overkill, but loving the scoring logic. We can discuss in goback :) Very clean/clear implementation and great "best effort" logic on version detection 👍
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looking excellent. Couple nits and it'll be about ready to go 👍
( oh, and the CI issue obvs :D ) |
- Added vectToScore which includes support for CVSS2, CVSS3.0, and CVSS3.1 - Added tests for new code
0fd68f9
to
b53da79
Compare
Codecov ReportPatch coverage:
Additional details and impacted files@@ Coverage Diff @@
## master #3171 +/- ##
==========================================
- Coverage 97.32% 97.23% -0.09%
==========================================
Files 224 224
Lines 44549 44762 +213
==========================================
+ Hits 43357 43526 +169
- Misses 1192 1236 +44
Flags with carried forward coverage won't be shown. Click here to find out more.
☔ View full report in Codecov by Sentry. |
- Added a couple vectors to get some edge cases in the code coverage - Updated CVSS2 calculations to distinguish None temporal scores vs 0.0