cvss-suite 1.2.2 → 1.2.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: eba339bafe4db99aa85aadd132b2e10faeddc2cc5abc37b9554e5e14caaf9dd4
-  data.tar.gz: fbe718029edb8a08b0da04944bfac0b29b8e813dbb621b51b914bb3d644d832a
+  metadata.gz: '09094d21733286857b9b006672aa297d88858737f58656b2b48627d23bce3e69'
+  data.tar.gz: 524220ad72a9e052adc3742d3b32d1df3d66f0f5bf0a0c8cfd83265bf5e58d09
 SHA512:
-  metadata.gz: 7576066639774a2e6ab36d716c657ff4e794f93d9eeda6565287772a5c097478877ba56a9fcf891b5c247fb15698bace28e92f4c2ea86e802f5c4a08e1046da2
-  data.tar.gz: 4c6f90f5431563ef303f9804f12375eb64f2b423e1e078dec2b62184b4f609fbcc0140e6bbcd483945014e1d681c820863efcc824f6b56816acc63ba16f32c51
+  metadata.gz: 9d871c1e5397598c1261c293524abee855f5c925e62c1e57aeb07473c7ec00c4c98c7ec146623b3a1e9737d0a0016a33098ac539c872762c88502f123501c69e
+  data.tar.gz: 3fed8bb40cab71f344a6bd339b50c75120942595ffbed2e4b4f0d534ef778ac0619681e648c95a74fac59615a748dd8a94931f0934744948a20ce7306b050e17

data/CHANGES.md

@@ -2,6 +2,12 @@
 All notable changes to this project will be documented in this file.
 This project adheres to [Semantic Versioning](http://semver.org/).
 
+## [1.2.3] - 2020-12-05
+
+### Fixes
+* CVSS v2 now returns the correct severity values based on NVD recommendation
+* CVSS v2 now supports vectors which are enclosed in parenthesis e.g. (AV:N/AC:L/Au:N/C:P/I:P/A:P)
+
 ## [1.2.2] - 2020-07-19
 
 ### Fixes

data/README.md

@@ -10,6 +10,11 @@
 This Ruby gem helps you to process the vector of the [**Common Vulnerability Scoring System**](https://www.first.org/cvss/specification-document).
 Besides calculating the Base, Temporal and Environmental Score, you are able to extract the selected option.
 
+## :warning: End of life :warning:
+
+This version of the gem is no longer supported, please update to a higher version.
+Please read the [changelog of 2.0.0](https://github.com/siemens/cvss-suite/blob/master/CHANGES.md#200---2020-05-10) for breaking changes.
+
 ## Installation
 
 Add this line to your application's Gemfile:

data/cvss_suite.gemspec

@@ -26,6 +26,8 @@ Gem::Specification.new do |spec|
 Besides calculating the Base, Temporal and Environmental Score, you are able to extract the selected option.'
   spec.homepage      = 'https://siemens.github.io/cvss-suite/'
 
+  spec.post_install_message = 'Version 1.x of this gem is no longer supported, please update to a supported version.'
+
   spec.required_ruby_version = '>= 2.0.0'
   spec.files         = `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
   spec.bindir        = 'exe'

data/lib/cvss_suite.rb

@@ -21,6 +21,7 @@ require 'cvss_suite/invalid_cvss'
 module CvssSuite
   CVSS_VECTOR_BEGINNINGS = [
     { string: 'AV:', version: 2 },
+    { string: '(AV:', version: 2 },
     { string: 'CVSS:3.0/', version: 3.0 },
     { string: 'CVSS:3.1/', version: 3.1 }
   ]

data/lib/cvss_suite/cvss.rb

@@ -107,7 +107,18 @@ module CvssSuite
       if start_of_vector.nil?
         ''
       else
-        @vector[start_of_vector..-1]
+        if start_of_vector == 1
+          matchArray =  @vector.scan(/\((?>[^)(]+|\g<0>)*\)/)
+          if matchArray.length == 1 && matchArray[0] == @vector
+            @vector.slice!(0)
+            @vector.slice!(@vector.length - 1)
+            @vector
+          else
+              ''
+          end
+        else          
+          @vector[start_of_vector..-1]
+        end
       end
     end
 

data/lib/cvss_suite/cvss2/cvss2.rb

@@ -25,6 +25,24 @@ module CvssSuite
       2
     end
 
+    # Returns the severity of the CVSSv2 vector.
+    # https://nvd.nist.gov/vuln-metrics/cvss
+    def severity
+      check_validity
+
+      score = overall_score
+
+      if (0.0..3.9).include? score
+        'Low'
+      elsif (4.0..6.9).include? score
+        'Medium'
+      elsif (7.0..10.0).include? score
+        'High'
+      else
+        'None'
+      end
+    end
+
     ##
     # Returns the Base Score of the CVSS vector.
 

data/lib/cvss_suite/version.rb

@@ -9,5 +9,5 @@
 # See the LICENSE.md file in the top-level directory.
 
 module CvssSuite
-  VERSION = '1.2.2'
+  VERSION = '1.2.3'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: cvss-suite
 version: !ruby/object:Gem::Version
-  version: 1.2.2
+  version: 1.2.3
 platform: ruby
 authors:
 - Oliver Hamboerger
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2020-07-19 00:00:00.000000000 Z
+date: 2020-12-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -118,7 +118,8 @@ homepage: https://siemens.github.io/cvss-suite/
 licenses:
 - MIT
 metadata: {}
-post_install_message: 
+post_install_message: Version 1.x of this gem is no longer supported, please update
+  to a supported version.
 rdoc_options: []
 require_paths:
 - lib