You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Hello, while fuzzing this implementation, I discovered that it is invalidating valid CVSS v2 vectors.
For instance, let's take the NVD CVSS v2 calculator as a reference.
Build any vector with base and environmental metrics different from Not Defined. Let's say (AV:L/AC:M/Au:S/C:N/I:N/A:P/CDP:N/TD:ND/CR:M/IR:ND/AR:ND).
The following Go code shows your implementation does not properly validate it as it raises an error where there should not be.
Hello, while fuzzing this implementation, I discovered that it is invalidating valid CVSS v2 vectors.
For instance, let's take the NVD CVSS v2 calculator as a reference.
Build any vector with base and environmental metrics different from Not Defined. Let's say
(AV:L/AC:M/Au:S/C:N/I:N/A:P/CDP:N/TD:ND/CR:M/IR:ND/AR:ND)
.The following Go code shows your implementation does not properly validate it as it raises an error where there should not be.
produces ->
The text was updated successfully, but these errors were encountered: