Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CVSS 4.0 #707

Merged
merged 2 commits into from Mar 27, 2024
Merged

CVSS 4.0 #707

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
66834eb
CVSS 4.0
tschmidtb51 Feb 27, 2024
1035bfe
Editorial
tschmidtb51 Feb 27, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
3 changes: 2 additions & 1 deletion csaf_2.1/prose/edit/src/schema-elements-02-props-03-vulnerabilities.md
View file
Open in desktop
Expand Up @@ -750,7 +750,8 @@ Valid values are:
The value `exploit_status` indicates that the `details` field contains a description of the degree to which an exploit for the vulnerability is known.
This knowledge can range from information privately held among a very small group to an issue that has been described to the public at
a major conference or is being widely exploited globally.
For consistency and simplicity, this section can be a mirror image of the CVSS "Exploitability" metric.
For consistency and simplicity, this section can be a mirror image of the CVSS `exploitMaturity` (v4.0),
respectively `exploitCodeMaturity` (v3.1 and v3.0) or `exploitability` (v2.0) metric.
However, it can also contain a more contextual status, such as "Weaponized" or "Functioning Code".

The value `impact` indicates that the `details` field contains an assessment of the impact on the user or the target set if
Expand Down
4 changes: 2 additions & 2 deletions csaf_2.1/prose/edit/src/tests-03-informative.md
View file
Open in desktop
Expand Up @@ -412,8 +412,6 @@ The relevant paths for this test are:

> The product version starts with a `v`.

-------

### Missing CVSS v4.0

For each item in the list of scores it MUST be tested that a `cvss_v4` object is present.
Expand Down Expand Up @@ -455,3 +453,5 @@ The relevant path for this test is:
```

> There is no CVSS v4.0 score given for `CSAFPID-9080700`.

-------