Cyber Risks · PortSwigger Research

CVSS v3.1 Calculator

Summary: PortSwigger's BApp Store lists CVSS v3.1 Calculator, a Burp Suite extension by Asif Minhas, version 1.0, last updated 03 April 2025, that calculates CVSS v3.1 base scores through an interface for selecting metric values. PortSwigger states the extension is written by a third party and makes no warranty about its quality or usefulness for any particular purpose.

Key Takeaway: Scoring a finding is a judgment call, and this tool only does the arithmetic - the base score still depends on the metric values an analyst selects, and the vendor explicitly disclaims any warranty on the third-party extension's quality or usefulness.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related