Skip to content

CVSS 3.1 calculator does not work as expected #108

@SDugo

Description

@SDugo

The CVSS calculator 3.1 is not honouring that scoring system for the "Environmental Score" options.

Steps to reproduce the error:

  1. Take the following CVSS string as an example, where we want to increase the weight of the integrity value in the overall score:
    https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/CR:X/IR:H/AR:X/MAV:X/MAC:X/MPR:X/MUI:X/MS:X/MC:X/MI:X/MA:X&version=3.1
    https://www.first.org/cvss/calculator/3-0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/IR:H
Image
  1. The base score is 7.5 and the modified score is 9.3.
  2. Try to replicate the same CVSS string on Faction's CVSS calculator, and you won't see any modification on the score, keeping it at 7.5. Image

Then, it would be necessary to ensure that using the CVSS calculator in Faction provides the same scoring as reputable online calculators.

Could you please fix this issue?

Thank you.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions