cvss 4.0 - Githubissues

DefectDojo / django-DefectDojo

DevSecOps, ASPM, Vulnerability Management. All on one platform.

https://defectdojo.com

BSD 3-Clause "New" or "Revised" License

3.52k stars 1.48k forks source link

Open saldam72 opened 6 months ago

saldam72 commented 6 months ago

Hello everybody, when will DD support CVSS 4.0?

Best, Sal

mtesauro commented 6 months ago

@saldam72 Can you define what you mean by "support CVSS 4.0"

Do you mean take that value in when a import of a tools file happens and track it with a finding?
Do you mean change out the CVSS 3.x calculator we have in the UI to a CVSS 4.0 calculator?
Something else?

It's hard to answer a general question like this without more details.

saldam72 commented 5 months ago

@mtesauro You are right :-)

Do you mean take that value in when a import of a tools file happens and track it with a finding? Yes (also via API)
Do you mean change out the CVSS 3.x calculator we have in the UI to a CVSS 4.0 calculator? Yes (also via API)

It should work as the current CVSS 3.x considering the vector prefix: