dradis-calculator_cvss 3.18.0

data/app/views/dradis/plugins/calculators/cvss/base/index.html.erb

@@ -0,0 +1,79 @@
+<%= content_tag :div, class: 'page-header' do %>
+  <h1>CVSSv3 score calculator</h1>
+<% end %>
+
+<p class="lead">Use this page to calculate the <abbr title="Common Vulnerability Scoring System">CVSS</abbr> score of a given finding.</p>
+
+<p class="alert alert-danger d-none" data-behavior="cvss-error"></p>
+
+<div class="row">
+  <div class="col-8">
+
+    <h2 title="The Base Metric group represents the intrinsic  characteristics of a vulnerability that are constant over time and across user environments. Determine the vulnerable component and score Attack Vector, Attack Complexity, Privileges Required and User Interaction relative to this.">
+      Base: <span id="base-score">0</span>
+    </h2>
+    <%= render 'dradis/plugins/calculators/cvss/base/base'          %>
+
+    <h2 title="The Temporal metrics measure the current state of exploit techniques or code availability, the existence of any patches or workarounds, or the confidence that one has in the description of a vulnerability.">
+      Temporal: <span id="temporal-score">0</span>
+    </h2>
+    <%= render 'dradis/plugins/calculators/cvss/base/temporal'      %>
+
+    <h2 title="These metrics enable the analyst to customize the CVSS score depending on the importance of the affected IT asset to a user’s organization, measured in terms of complementary/alternative security controls in place, Confidentiality, Integrity, and Availability. The metrics are the modified equivalent of base metrics and are assigned metric values based on the component placement in organization infrastructure.">
+      Environmental: <span id="environmental-score">0</span>
+    </h2>
+    <%= render 'dradis/plugins/calculators/cvss/base/environmental' %>
+  </div>
+
+  <div class="col-4">
+    <textarea name="cvss_fields" rows="52" class="form-control" style="width:100%">#[CVSSv3.Vector]#
+N/A
+
+#[CVSSv3.BaseScore]#
+N/A
+
+#[CVSSv3.BaseSeverity]#
+N/A
+
+#[CVSSv3.TemporalScore]#
+N/A
+
+#[CVSSv3.TemporalSeverity]#
+N/A
+
+#[CVSSv3.EnvironmentalScore]#
+N/A
+
+#[CVSSv3.EnvironmentalSeverity]#
+N/A
+
+#[CVSSv3.BaseAttackVector]#
+#[CVSSv3.BaseAttackComplexity]#
+#[CVSSv3.BasePrivilegesRequired]#
+#[CVSSv3.BaseUserInteraction]#
+#[CVSSv3.BaseScope]#
+#[CVSSv3.BaseConfidentiality]#
+#[CVSSv3.BaseIntegrity]#
+#[CVSSv3.BaseAvailability]#
+
+#[CVSSv3.TemporalExploitCodeMaturity]#
+#[CVSSv3.TemporalRemediationLevel]#
+#[CVSSv3.TemporalReportConfidence]#
+
+#[CVSSv3.EnvironmentalConfidentialityRequirement]#
+#[CVSSv3.EnvironmentalIntegrityRequirement]#
+#[CVSSv3.EnvironmentalAvailabilityRequirement]#
+
+#[CVSSv3.ModifiedAttackVector]#
+#[CVSSv3.ModifiedAttackComplexity]#
+#[CVSSv3.ModifiedPrivilegesRequired]#
+#[CVSSv3.ModifiedUserInteraction]#
+#[CVSSv3.ModifiedScope]#
+#[CVSSv3.ModifiedConfidentiality]#
+#[CVSSv3.ModifiedIntegrity]#
+#[CVSSv3.ModifiedAvailability]#
+
+
+</textarea>
+  </div>
+</div>

data/app/views/dradis/plugins/calculators/cvss/issues/_show-content.html.erb

@@ -0,0 +1,20 @@
+<div class="tab-pane" id="cvss-tab">
+  <div class="inner">
+    <h4 class="header-underline">CVSSv3 Risk Scoring -
+      <span class="actions">
+        <%= link_to cvss_calculator.cvss_project_issue_path(current_project, @issue) do %>
+          <i class="fa fa-pencil"></i> Edit
+        <% end %>
+    </h4>
+
+    <div class="mb-4 content-textile">
+      <%=
+        markup(
+          @issue.fields
+            .select { |k,v| Dradis::Plugins::Calculators::CVSS::V3::FIELDS.include?(k) }
+            .map { |k,v| "#[#{k}]#\n#{v}" }.join("\n\n")
+        )
+      %>
+    </div>
+  </div>
+</div>

data/app/views/dradis/plugins/calculators/cvss/issues/_show-tabs.html.erb

@@ -0,0 +1,3 @@
+<li class="nav-item">
+  <a href="#cvss-tab" data-toggle="tab" class="nav-link"><i class="fa fa-calculator"></i> CVSSv3</a>
+</li>

data/app/views/dradis/plugins/calculators/cvss/issues/edit.html.erb

@@ -0,0 +1,103 @@
+<% content_for :title, 'Edit CVSSv3 score' %>
+
+<% content_for :sidebar do %>
+  <%= render 'issues/sidebar'%>
+<% end %>
+
+<div class="content-container">
+  <h4 class="header-underline">Edit CVSSv3 Risk Scoring</h4>
+  <div id="issues_editor">
+    <div class="inner note-text-inner">
+
+      <%= simple_form_for [:cvss, current_project, @issue] do |f| %>
+
+        <div class="alert alert-error text-error" data-behavior="cvss-error">
+          <p><strong>Warning</strong>: all Base metrics are required</p>
+        </div>
+
+        <ul class="nav nav-pills w-100" id="cvss-tabs">
+          <li class="nav-item">
+            <a href="#cvss-edit-base" data-toggle="pill" class="nav-link active">Base: <span id="base-score">0</span></a>
+          </li>
+          <li class="nav-item">
+            <a href="#cvss-edit-temporal" data-toggle="pill" class="nav-link">Temporal: <span id="temporal-score">0</span></a>
+          </li>
+          <li class="nav-item">
+            <a href="#cvss-edit-environmental" data-toggle="pill" class="nav-link">Environmental: <span id="environmental-score">0</span></a>
+          </li>
+          <li class="nav-item pull-right">
+            <a href="#cvss-edit-result" data-toggle="pill" class="nav-link">Result</a>
+          </li>
+        </ul>
+
+        <div class="tab-content mt-4">
+          <div class="tab-pane active" id="cvss-edit-base">
+            <%= render 'dradis/plugins/calculators/cvss/base/base'          %>
+          </div>
+          <div class="tab-pane" id="cvss-edit-temporal">
+            <%= render 'dradis/plugins/calculators/cvss/base/temporal'      %>
+          </div>
+          <div class="tab-pane" id="cvss-edit-environmental">
+            <%= render 'dradis/plugins/calculators/cvss/base/environmental' %>
+          </div>
+
+          <div class="tab-pane" id="cvss-edit-result">
+            <textarea class="form-control" name="cvss_fields" rows="10" style="width:95%">#[CVSSv3.Vector]#
+  N/A
+
+  #[CVSSv3.BaseScore]#
+  N/A
+
+  #[CVSSv3.BaseSeverity]#
+  N/A
+
+  #[CVSSv3.TemporalScore]#
+  N/A
+
+  #[CVSSv3.TemporalSeverity]#
+  N/A
+
+  #[CVSSv3.EnvironmentalScore]#
+  N/A
+
+  #[CVSSv3.EnvironmentalSeverity]#
+  N/A
+
+  #[CVSSv3.BaseAttackVector]#
+  #[CVSSv3.BaseAttackComplexity]#
+  #[CVSSv3.BasePrivilegesRequired]#
+  #[CVSSv3.BaseUserInteraction]#
+  #[CVSSv3.BaseScope]#
+  #[CVSSv3.BaseConfidentiality]#
+  #[CVSSv3.BaseIntegrity]#
+  #[CVSSv3.BaseAvailability]#
+
+  #[CVSSv3.TemporalExploitCodeMaturity]#
+  #[CVSSv3.TemporalRemediationLevel]#
+  #[CVSSv3.TemporalReportConfidence]#
+
+  #[CVSSv3.EnvironmentalConfidentialityRequirement]#
+  #[CVSSv3.EnvironmentalIntegrityRequirement]#
+  #[CVSSv3.EnvironmentalAvailabilityRequirement]#
+
+  #[CVSSv3.ModifiedAttackVector]#
+  #[CVSSv3.ModifiedAttackComplexity]#
+  #[CVSSv3.ModifiedPrivilegesRequired]#
+  #[CVSSv3.ModifiedUserInteraction]#
+  #[CVSSv3.ModifiedScope]#
+  #[CVSSv3.ModifiedConfidentiality]#
+  #[CVSSv3.ModifiedIntegrity]#
+  #[CVSSv3.ModifiedAvailability]#
+
+  </textarea>
+          </div>
+        </div>
+
+        <div class="form-actions">
+          <%= f.button :submit, nil, class: 'btn btn-primary' %> or
+          <%= link_to 'Cancel', main_app.project_issue_path(current_project, @issue), class: 'cancel-link' %>
+        </div>
+      <% end %>
+    </div>
+  </div>
+</div>

data/app/views/layouts/dradis/plugins/calculators/cvss/base.html.erb

@@ -0,0 +1,27 @@
+<!DOCTYPE html>
+<html>
+  <head>
+    <title>CVSS Score Calculator | Dradis Framework</title>
+    <%= stylesheet_link_tag    'dradis/plugins/calculators/cvss/manifests/application', media: 'all', 'data-turbolinks-track': 'reload' %>
+    <%= javascript_include_tag 'dradis/plugins/calculators/cvss/manifests/application', 'data-turbolinks-track': 'reload' %>
+    <%= csrf_meta_tags %>
+
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  </head>
+  <body class="authenticated">
+    <div class="container">
+      <nav class="navbar navbar-light bg-light">
+        <a href="javascript:void(0)" class="navbar-brand">CVSS score calculator</a>
+        <ul class="navbar-nav pull-right">
+          <li class="nav-item">
+            <%= link_to main_app.root_path, class: 'nav-link' do %>
+            Back to the app  &rarr;
+            <% end %>
+          </li>
+        </ul>
+      </nav>
+
+      <%= yield%>
+    </div>
+  </body>
+</html>

data/config/routes.rb

@@ -0,0 +1,12 @@
+Dradis::Plugins::Calculators::CVSS::Engine.routes.draw do
+  get '/calculators/cvss' => 'base#index'
+
+  resources :projects, only: [] do
+    resources :issues, only: [] do
+      member do
+        get   'cvss' => 'issues#edit'
+        patch 'cvss' => 'issues#update'
+      end
+    end
+  end
+end

data/dradis-calculator_cvss.gemspec

@@ -0,0 +1,27 @@
+$:.push File.expand_path('../lib', __FILE__)
+
+require 'dradis/plugins/calculators/cvss/version'
+
+# Describe your gem and declare its dependencies:
+Gem::Specification.new do |spec|
+  spec.platform    = Gem::Platform::RUBY
+  spec.name        = 'dradis-calculator_cvss'
+  spec.version     = Dradis::Plugins::Calculators::CVSS::VERSION::STRING
+  spec.summary     = 'This plugin adds a CVSSv3 score calculator to Dradis.'
+  spec.description = 'Display a CVSS score calculator in Dradis Framework.'
+
+  spec.license = 'GPL-2'
+
+  spec.authors = ['Daniel Martin']
+  spec.email = ['etd@nomejortu.com']
+  spec.homepage = 'http://dradisframework.org'
+
+  spec.files = `git ls-files`.split($\)
+  spec.executables = spec.files.grep(%r{^bin/}).map{ |f| File.basename(f) }
+  spec.test_files = spec.files.grep(%r{^(test|spec|features)/})
+
+  spec.add_dependency 'dradis-plugins', '~> 3.0'
+
+  spec.add_development_dependency 'bundler', '~> 1.6'
+  spec.add_development_dependency 'rake', '~> 10.0'
+end

data/lib/dradis-calculator_cvss.rb

@@ -0,0 +1,13 @@
+require 'dradis-plugins'
+
+module Dradis
+  module Plugins
+    module Calculators
+      module CVSS
+      end
+    end
+  end
+end
+
+require 'dradis/plugins/calculators/cvss/engine'
+require 'dradis/plugins/calculators/cvss/version'

data/lib/dradis/plugins/calculators/cvss/engine.rb

@@ -0,0 +1,26 @@
+module Dradis::Plugins::Calculators::CVSS
+  class Engine < ::Rails::Engine
+    isolate_namespace Dradis::Plugins::Calculators::CVSS
+
+    include Dradis::Plugins::Base
+    provides :addon
+    description 'Risk Calculator: CVSSv3'
+
+    initializer 'calculator_cvss.asset_precompile_paths' do |app|
+      app.config.assets.precompile += ["dradis/plugins/calculators/cvss/manifests/*"]
+    end
+
+    initializer "calculator_cvss.inflections" do |app|
+      ActiveSupport::Inflector.inflections do |inflect|
+        inflect.acronym('CVSS')
+      end
+    end
+
+    initializer 'calculator_cvss.mount_engine' do
+      Rails.application.routes.append do
+        mount Dradis::Plugins::Calculators::CVSS::Engine => '/', as: :cvss_calculator
+      end
+    end
+
+  end
+end

data/lib/dradis/plugins/calculators/cvss/gem_version.rb

@@ -0,0 +1,21 @@
+module Dradis
+  module Plugins
+    module Calculators
+      module CVSS
+        # Returns the version of the currently loaded CVSS Calculator as a <tt>Gem::Version</tt>
+        def self.gem_version
+          Gem::Version.new VERSION::STRING
+        end
+
+        module VERSION
+          MAJOR = 3
+          MINOR = 18
+          TINY = 0
+          PRE = nil
+
+          STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".")
+        end
+      end
+    end
+  end
+end

data/lib/dradis/plugins/calculators/cvss/version.rb

@@ -0,0 +1,15 @@
+require_relative 'gem_version'
+
+module Dradis
+  module Plugins
+    module Calculators
+      module CVSS
+        # Returns the version of the currently loaded CVSS Calculator as a
+        # <tt>Gem::Version</tt>.
+        def self.version
+          gem_version
+        end
+      end
+    end
+  end
+end

metadata

@@ -0,0 +1,118 @@
+--- !ruby/object:Gem::Specification
+name: dradis-calculator_cvss
+version: !ruby/object:Gem::Version
+  version: 3.18.0
+platform: ruby
+authors:
+- Daniel Martin
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2020-07-22 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: dradis-plugins
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.6'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.6'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+description: Display a CVSS score calculator in Dradis Framework.
+email:
+- etd@nomejortu.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- ".github/issue_template.md"
+- ".github/pull_request_template.md"
+- ".gitignore"
+- CHANGELOG.md
+- CONTRIBUTING.md
+- Gemfile
+- LICENSE
+- README.md
+- Rakefile
+- app/assets/javascripts/dradis/plugins/calculators/cvss/calculator.js.coffee
+- app/assets/javascripts/dradis/plugins/calculators/cvss/manifests/application.js
+- app/assets/javascripts/dradis/plugins/calculators/cvss/manifests/tylium.js
+- app/assets/javascripts/dradis/plugins/calculators/cvss/vendor/cvsscalc30.js
+- app/assets/stylesheets/dradis/plugins/calculators/cvss/manifests/application.css.scss
+- app/controllers/dradis/plugins/calculators/cvss/base_controller.rb
+- app/controllers/dradis/plugins/calculators/cvss/issues_controller.rb
+- app/models/dradis/plugins/calculators/cvss/v3.rb
+- app/views/dradis/plugins/calculators/cvss/_addons_menu.html.erb
+- app/views/dradis/plugins/calculators/cvss/_addons_menu_bs4.html.erb
+- app/views/dradis/plugins/calculators/cvss/base/_base.html.erb
+- app/views/dradis/plugins/calculators/cvss/base/_environmental.html.erb
+- app/views/dradis/plugins/calculators/cvss/base/_temporal.html.erb
+- app/views/dradis/plugins/calculators/cvss/base/index.html.erb
+- app/views/dradis/plugins/calculators/cvss/issues/_show-content.html.erb
+- app/views/dradis/plugins/calculators/cvss/issues/_show-tabs.html.erb
+- app/views/dradis/plugins/calculators/cvss/issues/edit.html.erb
+- app/views/layouts/dradis/plugins/calculators/cvss/base.html.erb
+- config/routes.rb
+- dradis-calculator_cvss.gemspec
+- lib/dradis-calculator_cvss.rb
+- lib/dradis/plugins/calculators/cvss/engine.rb
+- lib/dradis/plugins/calculators/cvss/gem_version.rb
+- lib/dradis/plugins/calculators/cvss/version.rb
+homepage: http://dradisframework.org
+licenses:
+- GPL-2
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.1.2
+signing_key: 
+specification_version: 4
+summary: This plugin adds a CVSSv3 score calculator to Dradis.
+test_files: []