Cyber Risks · PortSwigger Research

CVSS Calculator

Summary: PortSwigger's BApp Store lists a Burp Suite extension called CVSS Calculator, authored by Moein Fatehi at version 1.0, which calculates CVSS v2 and v3 scores for vulnerabilities. The listing shows it was last updated on 30 March 2017, carries an estimated system impact of Low, and is third-party code for which PortSwigger makes no warranty of quality or usefulness.

Why it matters: The scoring tool many teams would reach for to rate a finding was last updated in 2017, so it predates CVSS v4 and any scoring changes since - a reminder that the number attached to a vulnerability is only as current as the tool that produced it.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related