Temporal and environmental severities reversed in json output

RedHatProductSecurity / cvss

CVSS2/3/4 library with interactive calculator for Python 2 and Python 3

GNU Lesser General Public License v3.0

79 stars 28 forks source link

Temporal and environmental severities reversed in json output #34

Closed Roang-zero1 closed 2 years ago

Roang-zero1 commented 2 years ago

Hi, I've discovered a problem while using an environmental severity with the cvss3 implementation: When using the as_json() function in the latest version the temporal and environmental severities are switched.

See: https://github.com/skontar/cvss/blob/5f8e1e8f3ba557fa44d83a4e1c488f466e9b7286/cvss/cvss3.py#L474-L475

skontar commented 2 years ago

@mprpic FYI, as you were adding this functionality. May be worth checking if it may have caused any issues where it was used.