aboutcode-org / aboutcode-org/vulnerablecode

Wrong CVSS3 V3.1 QR "MODERATE"

Ouverte
#1,186 1 commentaire 1 réaction 0 personnes assignées Voir sur GitHub
Langage dominant
Python
Étoiles
702
Forks
328
Merge moyen
3 j 8 h
PR mergées (30 j)
3

Description

GitHub advisories provide the severity "MODERATE" and as a result VulnerableCode does also provide this severity which according to the [specification](https://www.first.org/cvss/v3.1/specification-document#Qualitative-Severity-Rating-Scale) should be "MEDIUM" instead.

For example, this severity is classified as "MODERATE" by GitHub:
https://github.com/advisories/GHSA-c7mc-q43h-5672

It is reported by VulnerableCode as:
```json
{
"reference_url": "https://github.com/advisories/GHSA-c7mc-q43h-5672",
"reference_id": "GHSA-c7mc-q43h-5672",
"scores": [
{
"value": "MODERATE",
"scoring_system": "cvssv3.1_qr",
"scoring_elements": ""
}
],
"url": "https://github.com/advisories/GHSA-c7mc-q43h-5672"
}
```

It would be good if VulnerableCode could map "MODERATE" to the correct "MEDIUM" in its API response.

Guide de contribution

Aucun guide de contribution indexé pour ce dépôt

Évaluation

Cette issue n'a pas encore été évaluée.

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.