Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support CVSSv3 scores and severities #69

Merged
merged 8 commits into from
Jun 8, 2022
Merged

Support CVSSv3 scores and severities #69

Changes from 1 commit
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
5ab2ac4
Add cvss_version field to CVE collection
dav3r May 5, 2022
553f399
Update severity calculation to include CVSSv3
dav3r May 5, 2022
1ad23ec
Support CVSSv3 scores and store CVSS version
dav3r May 5, 2022
d5e722e
Use cleaner conditional logic
dav3r May 6, 2022
2b81487
Prefer CVSS v3 score over v2 and add cvss_version to ticket details
dav3r May 10, 2022
79d29f5
Ensure ticket severity correctly matches CVSS score
dav3r May 11, 2022
ea1a9dc
Add comments about CVSS score to severity mapping
dav3r May 16, 2022
5212891
Move comment to a better location
dav3r Jun 8, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
27 changes: 19 additions & 8 deletions cyhy/db/database.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1582,15 +1582,26 @@ def get_indices(self):

def save(self, *args, **kwargs):
# Calculate severity from cvss on save
# Source: https://nvd.nist.gov/vuln-metrics/cvss
cvss = self["cvss_score"]
if cvss == 10:
self["severity"] = 4
elif cvss >= 7.0:
self["severity"] = 3
elif cvss >= 4.0:
self["severity"] = 2
else:
self["severity"] = 1
if self["cvss_version"] == "2.0":
if cvss == 10:
self["severity"] = 4
elif cvss >= 7.0:
self["severity"] = 3
elif cvss >= 4.0:
self["severity"] = 2
else:
self["severity"] = 1
elif self["cvss_version"] in ["3.0", "3.1"]:
if cvss >= 9.0:
self["severity"] = 4
elif cvss >= 7.0:
self["severity"] = 3
elif cvss >= 4.0:
self["severity"] = 2
else:
self["severity"] = 1
super(CVEDoc, self).save(*args, **kwargs)


Expand Down