cvss

README

go-cvss - Common Vulnerability Scoring System (CVSS) Version 3

Install

$ go get -u github.com/spiegel-im-spiegel/gpgpdump

Usage

m := cvssv3.New()
if err := m.ImportBaseVector("CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"); err != nil {
    fmt.Fprintln(os.Stderr, err)
    return
}
severity := m.Base.GetSeverity()
fmt.Printf("%s: %v (%.1f)\n\n", severity.Title(language.English), severity, m.Base.Score())
if r, err := m.Base.Report(nil, language.English); err != nil { //output with CSV format
    fmt.Fprintln(os.Stderr, err)
} else {
    io.Copy(os.Stdout, r)
}
// Output:
//Severity: Critical (9.9)
//
//Base Metrics,Metric Value
//Attack Vector,Network
//Attack Complexity,Low
//Privileges Required,Low
//User Interaction,None
//Scope,Changed
//Confidentiality Impact,High
//Integrity Impact,High
//Availability Impact,High

ref: sample.go

Bookmark

• CVSS v3.0 Specification Document
• JVN が CVSSv3 による脆弱性評価を開始 — しっぽのさきっちょ | text.Baldanders.info

Documentation

Index

• Variables

Variables

var (
	ErrUndefinedMetric = errors.New("undefined metric")
	ErrInvalidVector   = errors.New("invalid vector")
	ErrNotSupportVer   = errors.New("not support version")
)

Error instances