Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[cvss]: Unable to parse vectors with temporal score component #1085

Open
ctron opened this issue Jan 15, 2024 · 1 comment
Open

[cvss]: Unable to parse vectors with temporal score component #1085

ctron opened this issue Jan 15, 2024 · 1 comment

Comments

@ctron
Copy link
Contributor

ctron commented Jan 15, 2024

Parsing scores from the cvelistV5 repository make some scores fail with:

unknown CVSS metric name: `E`

It looks like there's a todo remaining for this:

// TODO(tarcieri): Environmental and Temporal Metrics

I might be able to work on this and provide a PR if someone can review it.

@tarcieri
Copy link
Member

tarcieri commented Jan 16, 2024

Yep, we currently only support the CVSS v3.1 Base metric group, hence the type being cvss::v3::Base. The Temporal and Environmental metric groups are separate and currently unimplemented.

All that said, it would probably be good to add CVSS v4.0 support first (edit: opened #1087)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants