dradis-calculator_cvss 3.14.0 → 3.19.0

data/app/views/dradis/plugins/calculators/cvss/base/_temporal.html.erb

@@ -1,60 +1,60 @@
 <section data-behavior="cvss-buttons">
 
   <div class="inner">
-    <h3 title="This metric measures the likelihood of the vulnerability being attacked, and is typically based on the current state of exploit techniques, exploit code availability, or active, 'in-the-wild' exploitation.">
+    <h5 class="header-underline mt-0" title="This metric measures the likelihood of the vulnerability being attacked, and is typically based on the current state of exploit techniques, exploit code availability, or active, 'in-the-wild' exploitation.">
       Exploit Code Maturity (E)
-    </h3>
+    </h5>
 
     <%= hidden_field_tag :e, @cvss_vector['E'] %>
 
-    <div class="btn-group" data-toggle="buttons-radio">
-      <button type="button" class="btn btn-med<%= ' active btn-primary' if @cvss_vector['E'] == 'X' %>" name="e" value="X" title="(X) Assigning this value to the metric will not influence the score.">Not Defined <i class="fa fa-question-circle-o" aria-hidden="true"></i></button>
+    <div class="btn-group mb-4" data-toggle="buttons-radio">
+      <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['E'] == 'X' %>" name="e" value="X" data-label="Not Defined" title="(X) Assigning this value to the metric will not influence the score.">Not Defined <i class="fa fa-question-circle-o" aria-hidden="true"></i></button>
 
-      <button type="button" class="btn btn-med<%= ' active btn-primary' if @cvss_vector['E'] == 'U' %>" name="e" value="U" title="No exploit code is available, or an exploit is theoretical.">Unproven <i class="fa fa-question-circle-o" aria-hidden="true"></i></button>
+      <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['E'] == 'U' %>" name="e" value="U" data-label="Unproven" title="No exploit code is available, or an exploit is theoretical.">Unproven <i class="fa fa-question-circle-o" aria-hidden="true"></i></button>
 
-      <button type="button" class="btn btn-med<%= ' active btn-primary' if @cvss_vector['E'] == 'P' %>" name="e" value="P" title="(P) Proof-of-concept exploit code is available, or an attack demonstration is not practical for most systems. The code or technique is not functional in all situations and may require substantial modification by a skilled attacker.">Proof-of-Concept <i class="fa fa-question-circle-o" aria-hidden="true"></i></button>
+      <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['E'] == 'P' %>" name="e" value="P" data-label="Proof-of-Concept" title="(P) Proof-of-concept exploit code is available, or an attack demonstration is not practical for most systems. The code or technique is not functional in all situations and may require substantial modification by a skilled attacker.">Proof-of-Concept <i class="fa fa-question-circle-o" aria-hidden="true"></i></button>
 
-      <button type="button" class="btn btn-med<%= ' active btn-primary' if @cvss_vector['E'] == 'F' %>" name="e" value="F" title="(F) Functional exploit code is available. The code works in most situations where the vulnerability exists.">Functional <i class="fa fa-question-circle-o" aria-hidden="true"></i></button>
+      <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['E'] == 'F' %>" name="e" value="F" data-label="Functional" title="(F) Functional exploit code is available. The code works in most situations where the vulnerability exists.">Functional <i class="fa fa-question-circle-o" aria-hidden="true"></i></button>
 
-      <button type="button" class="btn btn-med<%= ' active btn-primary' if @cvss_vector['E'] == 'H' %>" name="e" value="H" title="(H) Functional autonomous code exists, or no exploit is required (manual trigger) and details are widely available. Exploit code works in every situation, or is actively being delivered via an autonomous agent (such as a worm or virus). Network-connected systems are likely to encounter scanning or exploitation attempts. Exploit development has reached the level of reliable, widely-available, easy-to-use automated tools.">High <i class="fa fa-question-circle-o" aria-hidden="true"></i></button>
+      <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['E'] == 'H' %>" name="e" value="H" data-label="High" title="(H) Functional autonomous code exists, or no exploit is required (manual trigger) and details are widely available. Exploit code works in every situation, or is actively being delivered via an autonomous agent (such as a worm or virus). Network-connected systems are likely to encounter scanning or exploitation attempts. Exploit development has reached the level of reliable, widely-available, easy-to-use automated tools.">High <i class="fa fa-question-circle-o" aria-hidden="true"></i></button>
     </div>
   </div>
 
   <div class="inner">
-    <h3 title="The Remediation Level of a vulnerability is an important factor for prioritization. The typical vulnerability is unpatched when initially published. Workarounds or hotfixes may offer interim remediation until an official patch or upgrade is issued. Each of these respective stages adjusts the temporal score downwards, reflecting the decreasing urgency as remediation becomes final.">
+    <h5 class="header-underline mt-0" title="The Remediation Level of a vulnerability is an important factor for prioritization. The typical vulnerability is unpatched when initially published. Workarounds or hotfixes may offer interim remediation until an official patch or upgrade is issued. Each of these respective stages adjusts the temporal score downwards, reflecting the decreasing urgency as remediation becomes final.">
       Remediation Level (RL)
-    </h3>
+    </h5>
 
     <%= hidden_field_tag :rl, @cvss_vector['RL'] %>
 
-    <div class="btn-group" data-toggle="buttons-radio">
-      <button type="button" class="btn btn-med<%= ' active btn-primary' if @cvss_vector['RL'] == 'X' %>" name="rl" value="X" title="(X) Assigning this value to the metric will not influence the score.">Not Defined <i class="fa fa-question-circle-o" aria-hidden="true"></i></button>
+    <div class="btn-group mb-4" data-toggle="buttons-radio">
+      <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['RL'] == 'X' %>" name="rl" value="X" data-label="Not Defined" title="(X) Assigning this value to the metric will not influence the score.">Not Defined <i class="fa fa-question-circle-o" aria-hidden="true"></i></button>
 
-      <button type="button" class="btn btn-med<%= ' active btn-primary' if @cvss_vector['RL'] == 'O' %>" name="rl" value="O" title="(O) A complete vendor solution is available. Either the vendor has issued an official patch, or an upgrade is available.">Official Fix <i class="fa fa-question-circle-o" aria-hidden="true"></i></button>
+      <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['RL'] == 'O' %>" name="rl" value="O" data-label="Official Fix" title="(O) A complete vendor solution is available. Either the vendor has issued an official patch, or an upgrade is available.">Official Fix <i class="fa fa-question-circle-o" aria-hidden="true"></i></button>
 
-      <button type="button" class="btn btn-med<%= ' active btn-primary' if @cvss_vector['RL'] == 'T' %>" name="rl" value="T" title="(T) There is an official but temporary fix available. This includes instances where the vendor issues a temporary hotfix, tool, or workaround.">Temporary Fix <i class="fa fa-question-circle-o" aria-hidden="true"></i></button>
+      <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['RL'] == 'T' %>" name="rl" value="T" data-label="Temporary Fix" title="(T) There is an official but temporary fix available. This includes instances where the vendor issues a temporary hotfix, tool, or workaround.">Temporary Fix <i class="fa fa-question-circle-o" aria-hidden="true"></i></button>
 
-      <button type="button" class="btn btn-med<%= ' active btn-primary' if @cvss_vector['RL'] == 'W' %>" name="rl" value="W" title="(W) There is an unofficial, non-vendor solution available. In some cases, users of the affected technology will create a patch of their own or provide steps to work around or otherwise mitigate the vulnerability.">Workaround <i class="fa fa-question-circle-o" aria-hidden="true"></i></button>
+      <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['RL'] == 'W' %>" name="rl" value="W" data-label="Workaround" title="(W) There is an unofficial, non-vendor solution available. In some cases, users of the affected technology will create a patch of their own or provide steps to work around or otherwise mitigate the vulnerability.">Workaround <i class="fa fa-question-circle-o" aria-hidden="true"></i></button>
 
-      <button type="button" class="btn btn-med<%= ' active btn-primary' if @cvss_vector['RL'] == 'U' %>" name="rl" value="U" title="(U) There is either no solution available or it is impossible to apply.">Unavailable <i class="fa fa-question-circle-o" aria-hidden="true"></i></button>
+      <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['RL'] == 'U' %>" name="rl" value="U" data-label="Unavailable" title="(U) There is either no solution available or it is impossible to apply.">Unavailable <i class="fa fa-question-circle-o" aria-hidden="true"></i></button>
     </div>
   </div>
 
   <div class="inner">
-    <h3 title="This metric measures the degree of confidence in the existence of the vulnerability and the credibility of the known technical details. Sometimes only the existence of vulnerabilities are publicized, but without specific details. For example, an impact may be recognized as undesirable, but the root cause may not be known. The vulnerability may later be corroborated by research which suggests where the vulnerability may lie, though the research may not be certain. Finally, a vulnerability may be confirmed through acknowledgement by the author or vendor of the affected technology. The urgency of a vulnerability is higher when a vulnerability is known to exist with certainty. This metric also suggests the level of technical knowledge available to would-be attackers.">
+    <h5 class="header-underline mt-0" title="This metric measures the degree of confidence in the existence of the vulnerability and the credibility of the known technical details. Sometimes only the existence of vulnerabilities are publicized, but without specific details. For example, an impact may be recognized as undesirable, but the root cause may not be known. The vulnerability may later be corroborated by research which suggests where the vulnerability may lie, though the research may not be certain. Finally, a vulnerability may be confirmed through acknowledgement by the author or vendor of the affected technology. The urgency of a vulnerability is higher when a vulnerability is known to exist with certainty. This metric also suggests the level of technical knowledge available to would-be attackers.">
       Report Confidence (RC)
-    </h3>
+    </h5>
 
     <%= hidden_field_tag :rc, @cvss_vector['RC'] %>
 
-    <div class="btn-group" data-toggle="buttons-radio">
-      <button type="button" class="btn btn-med<%= ' active btn-primary' if @cvss_vector['RC'] == 'X' %>" name="rc" value="X" title="(X) Assigning this value to the metric will not influence the score.">Not Defined <i class="fa fa-question-circle-o" aria-hidden="true"></i></button>
+    <div class="btn-group mb-4" data-toggle="buttons-radio">
+      <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['RC'] == 'X' %>" name="rc" value="X" data-label="Not Defined" title="(X) Assigning this value to the metric will not influence the score.">Not Defined <i class="fa fa-question-circle-o" aria-hidden="true"></i></button>
 
-      <button type="button" class="btn btn-med<%= ' active btn-primary' if @cvss_vector['RC'] == 'U' %>" name="rc" value="U" title="(U) There are reports of impacts that indicate a vulnerability is present. The reports indicate that the cause of the vulnerability is unknown, or reports may differ on the cause or impacts of the vulnerability. Reporters are uncertain of the true nature of the vulnerability, and there is little confidence in the validity of the reports or whether a static Base score can be applied given the differences described. An example is a bug report which notes that an intermittent but non-reproducible crash occurs, with evidence of memory corruption suggesting that denial of service, or possible more serious impacts, may result.">Unknown <i class="fa fa-question-circle-o" aria-hidden="true"></i></button>
+      <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['RC'] == 'U' %>" name="rc" value="U" data-label="Unknown" title="(U) There are reports of impacts that indicate a vulnerability is present. The reports indicate that the cause of the vulnerability is unknown, or reports may differ on the cause or impacts of the vulnerability. Reporters are uncertain of the true nature of the vulnerability, and there is little confidence in the validity of the reports or whether a static Base score can be applied given the differences described. An example is a bug report which notes that an intermittent but non-reproducible crash occurs, with evidence of memory corruption suggesting that denial of service, or possible more serious impacts, may result.">Unknown <i class="fa fa-question-circle-o" aria-hidden="true"></i></button>
 
-      <button type="button" class="btn btn-med<%= ' active btn-primary' if @cvss_vector['RC'] == 'R' %>" name="rc" value="R" title="(R) Significant details are published, but researchers either do not have full confidence in the root cause, or do not have access to source code to fully confirm all of the interactions that may lead to the result. Reasonable confidence exists, however, that the bug is reproducible and at least one impact is able to be verified (Proof-of-concept exploits may provide this). An example is a detailed write-up of research into a vulnerability with an explanation (possibly obfuscated or 'left as an exercise to the reader') that gives assurances on how to reproduce the results.">Reasonable <i class="fa fa-question-circle-o" aria-hidden="true"></i></button>
+      <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['RC'] == 'R' %>" name="rc" value="R" data-label="Reasonable" title="(R) Significant details are published, but researchers either do not have full confidence in the root cause, or do not have access to source code to fully confirm all of the interactions that may lead to the result. Reasonable confidence exists, however, that the bug is reproducible and at least one impact is able to be verified (Proof-of-concept exploits may provide this). An example is a detailed write-up of research into a vulnerability with an explanation (possibly obfuscated or 'left as an exercise to the reader') that gives assurances on how to reproduce the results.">Reasonable <i class="fa fa-question-circle-o" aria-hidden="true"></i></button>
 
-      <button type="button" class="btn btn-med<%= ' active btn-primary' if @cvss_vector['RC'] == 'C' %>" name="rc" value="C" title="(C) Detailed reports exist, or functional reproduction is possible (functional exploits may provide this). Source code is available to independently verify the assertions of the research, or the author or vendor of the affected code has confirmed the presence of the vulnerability.">Confirmed <i class="fa fa-question-circle-o" aria-hidden="true"></i></button>
+      <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['RC'] == 'C' %>" name="rc" value="C" data-label="Confirmed" title="(C) Detailed reports exist, or functional reproduction is possible (functional exploits may provide this). Source code is available to independently verify the assertions of the research, or the author or vendor of the affected code has confirmed the presence of the vulnerability.">Confirmed <i class="fa fa-question-circle-o" aria-hidden="true"></i></button>
     </div>
 
   </div>

data/app/views/dradis/plugins/calculators/cvss/base/index.html.erb

@@ -4,11 +4,10 @@
 
 <p class="lead">Use this page to calculate the <abbr title="Common Vulnerability Scoring System">CVSS</abbr> score of a given finding.</p>
 
-<p class="alert alert-error text-error hide" data-behavior="cvss-error"></p>
-
+<p class="alert alert-danger d-none" data-behavior="cvss-error"></p>
 
 <div class="row">
-  <div class="span8">
+  <div class="col-8">
 
     <h2 title="The Base Metric group represents the intrinsic  characteristics of a vulnerability that are constant over time and across user environments. Determine the vulnerable component and score Attack Vector, Attack Complexity, Privileges Required and User Interaction relative to this.">
       Base: <span id="base-score">0</span>
@@ -26,8 +25,8 @@
     <%= render 'dradis/plugins/calculators/cvss/base/environmental' %>
   </div>
 
-  <div class="span4">
-    <textarea name="cvss_fields" rows="52" style="width:100%">#[CVSSv3.Vector]#
+  <div class="col-4">
+    <textarea name="cvss_fields" rows="52" class="form-control" style="width:100%">#[CVSSv3.Vector]#
 N/A
 
 #[CVSSv3.BaseScore]#
@@ -56,8 +55,24 @@ N/A
 #[CVSSv3.BaseConfidentiality]#
 #[CVSSv3.BaseIntegrity]#
 #[CVSSv3.BaseAvailability]#
+
+#[CVSSv3.TemporalExploitCodeMaturity]#
+#[CVSSv3.TemporalRemediationLevel]#
+#[CVSSv3.TemporalReportConfidence]#
+
 #[CVSSv3.EnvironmentalConfidentialityRequirement]#
 #[CVSSv3.EnvironmentalIntegrityRequirement]#
+#[CVSSv3.EnvironmentalAvailabilityRequirement]#
+
+#[CVSSv3.ModifiedAttackVector]#
+#[CVSSv3.ModifiedAttackComplexity]#
+#[CVSSv3.ModifiedPrivilegesRequired]#
+#[CVSSv3.ModifiedUserInteraction]#
+#[CVSSv3.ModifiedScope]#
+#[CVSSv3.ModifiedConfidentiality]#
+#[CVSSv3.ModifiedIntegrity]#
+#[CVSSv3.ModifiedAvailability]#
+
 
 </textarea>
   </div>

data/app/views/dradis/plugins/calculators/cvss/issues/_show-content.html.erb

@@ -1,14 +1,13 @@
 <div class="tab-pane" id="cvss-tab">
   <div class="inner">
-    <h3>CVSSv3 Risk Scoring -
+    <h4 class="header-underline">CVSSv3 Risk Scoring -
       <span class="actions">
-        <%= link_to cvss_calculator.cvss_project_issue_path(current_project, @issue),
-              class: 'action-link' do %>
+        <%= link_to cvss_calculator.cvss_project_issue_path(current_project, @issue) do %>
           <i class="fa fa-pencil"></i> Edit
         <% end %>
-    </h3>
+    </h4>
 
-    <div class="content-textile">
+    <div class="mb-4 content-textile">
       <%=
         markup(
           @issue.fields

data/app/views/dradis/plugins/calculators/cvss/issues/_show-tabs.html.erb

@@ -1 +1,3 @@
-<li><a href="#cvss-tab" data-toggle="tab"><i class="fa fa-calculator"></i> CVSSv3</a></li>
+<li class="nav-item">
+  <a href="#cvss-tab" data-toggle="tab" class="nav-link"><i class="fa fa-calculator"></i> CVSSv3</a>
+</li>

data/app/views/dradis/plugins/calculators/cvss/issues/edit.html.erb

@@ -4,75 +4,100 @@
   <%= render 'issues/sidebar'%>
 <% end %>
 
-<div id="issues_editor">
-  <div class="inner note-text-inner">
-    <h3>Edit CVSSv3 Risk Scoring</h3>
-
-    <%= simple_form_for [:cvss, current_project, @issue] do |f| %>
-
-      <div class="alert alert-error text-error hide" data-behavior="cvss-error">
-        <p><strong>Warning</strong>: all Base metrics are required</p>
-      </div>
-      <br/>
-
-      <ul class="nav nav-pills" id="cvss-tabs">
-        <li class="active"><a href="#cvss-edit-base" data-toggle="tab">Base: <span id="base-score">0</span></a></li>
-        <li><a href="#cvss-edit-temporal" data-toggle="tab">Temporal: <span id="temporal-score">0</span></a></li>
-        <li><a href="#cvss-edit-environmental" data-toggle="tab">Environmental: <span id="environmental-score">0</span></a></li>
-        <li class="pull-right"><a href="#cvss-edit-result" data-toggle="tab">Result</a></li>
-      </ul>
-
-      <div class="tab-content">
-        <div class="tab-pane active" id="cvss-edit-base">
-          <%= render 'dradis/plugins/calculators/cvss/base/base'          %>
-        </div>
-        <div class="tab-pane" id="cvss-edit-temporal">
-          <%= render 'dradis/plugins/calculators/cvss/base/temporal'      %>
-        </div>
-        <div class="tab-pane" id="cvss-edit-environmental">
-          <%= render 'dradis/plugins/calculators/cvss/base/environmental' %>
+<div class="content-container">
+  <h4 class="header-underline">Edit CVSSv3 Risk Scoring</h4>
+  <div id="issues_editor">
+    <div class="inner note-text-inner">
+
+      <%= simple_form_for [:cvss, current_project, @issue] do |f| %>
+
+        <div class="alert alert-error text-error" data-behavior="cvss-error">
+          <p><strong>Warning</strong>: all Base metrics are required</p>
         </div>
 
-        <div class="tab-pane" id="cvss-edit-result">
-          <textarea name="cvss_fields" rows="10" style="width:95%">#[CVSSv3.Vector]#
-N/A
+        <ul class="nav nav-pills w-100" id="cvss-tabs">
+          <li class="nav-item">
+            <a href="#cvss-edit-base" data-toggle="pill" class="nav-link active">Base: <span id="base-score">0</span></a>
+          </li>
+          <li class="nav-item">
+            <a href="#cvss-edit-temporal" data-toggle="pill" class="nav-link">Temporal: <span id="temporal-score">0</span></a>
+          </li>
+          <li class="nav-item">
+            <a href="#cvss-edit-environmental" data-toggle="pill" class="nav-link">Environmental: <span id="environmental-score">0</span></a>
+          </li>
+          <li class="nav-item pull-right">
+            <a href="#cvss-edit-result" data-toggle="pill" class="nav-link">Result</a>
+          </li>
+        </ul>
+
+        <div class="tab-content mt-4">
+          <div class="tab-pane active" id="cvss-edit-base">
+            <%= render 'dradis/plugins/calculators/cvss/base/base'          %>
+          </div>
+          <div class="tab-pane" id="cvss-edit-temporal">
+            <%= render 'dradis/plugins/calculators/cvss/base/temporal'      %>
+          </div>
+          <div class="tab-pane" id="cvss-edit-environmental">
+            <%= render 'dradis/plugins/calculators/cvss/base/environmental' %>
+          </div>
+
+          <div class="tab-pane" id="cvss-edit-result">
+            <textarea class="form-control" name="cvss_fields" rows="10" style="width:95%">#[CVSSv3.Vector]#
+  N/A
 
-#[CVSSv3.BaseScore]#
-N/A
+  #[CVSSv3.BaseScore]#
+  N/A
 
-#[CVSSv3.BaseSeverity]#
-N/A
+  #[CVSSv3.BaseSeverity]#
+  N/A
 
-#[CVSSv3.TemporalScore]#
-N/A
+  #[CVSSv3.TemporalScore]#
+  N/A
 
-#[CVSSv3.TemporalSeverity]#
-N/A
+  #[CVSSv3.TemporalSeverity]#
+  N/A
 
-#[CVSSv3.EnvironmentalScore]#
-N/A
+  #[CVSSv3.EnvironmentalScore]#
+  N/A
 
-#[CVSSv3.EnvironmentalSeverity]#
-N/A
+  #[CVSSv3.EnvironmentalSeverity]#
+  N/A
 
-#[CVSSv3.BaseAttackVector]#
-#[CVSSv3.BaseAttackComplexity]#
-#[CVSSv3.BasePrivilegesRequired]#
-#[CVSSv3.BaseUserInteraction]#
-#[CVSSv3.BaseScope]#
-#[CVSSv3.BaseConfidentiality]#
-#[CVSSv3.BaseIntegrity]#
-#[CVSSv3.BaseAvailability]#
-#[CVSSv3.EnvironmentalConfidentialityRequirement]#
-#[CVSSv3.EnvironmentalIntegrityRequirement]#
-</textarea>
+  #[CVSSv3.BaseAttackVector]#
+  #[CVSSv3.BaseAttackComplexity]#
+  #[CVSSv3.BasePrivilegesRequired]#
+  #[CVSSv3.BaseUserInteraction]#
+  #[CVSSv3.BaseScope]#
+  #[CVSSv3.BaseConfidentiality]#
+  #[CVSSv3.BaseIntegrity]#
+  #[CVSSv3.BaseAvailability]#
+
+  #[CVSSv3.TemporalExploitCodeMaturity]#
+  #[CVSSv3.TemporalRemediationLevel]#
+  #[CVSSv3.TemporalReportConfidence]#
+
+  #[CVSSv3.EnvironmentalConfidentialityRequirement]#
+  #[CVSSv3.EnvironmentalIntegrityRequirement]#
+  #[CVSSv3.EnvironmentalAvailabilityRequirement]#
+
+  #[CVSSv3.ModifiedAttackVector]#
+  #[CVSSv3.ModifiedAttackComplexity]#
+  #[CVSSv3.ModifiedPrivilegesRequired]#
+  #[CVSSv3.ModifiedUserInteraction]#
+  #[CVSSv3.ModifiedScope]#
+  #[CVSSv3.ModifiedConfidentiality]#
+  #[CVSSv3.ModifiedIntegrity]#
+  #[CVSSv3.ModifiedAvailability]#
+
+  </textarea>
+          </div>
         </div>
-      </div>
 
-      <div class="form-actions">
-        <%= f.button :submit, nil, class: 'btn btn-primary' %> or
-        <%= link_to 'Cancel', main_app.project_issue_path(current_project, @issue), class: 'cancel-link' %>
-      </div>
-    <% end %>
+        <div class="form-actions">
+          <%= f.button :submit, nil, class: 'btn btn-primary' %> or
+          <%= link_to 'Cancel', main_app.project_issue_path(current_project, @issue), class: 'cancel-link' %>
+        </div>
+      <% end %>
+    </div>
   </div>
 </div>

data/app/views/layouts/dradis/plugins/calculators/cvss/base.html.erb

@@ -10,18 +10,16 @@
   </head>
   <body class="authenticated">
     <div class="container">
-      <div class="navbar">
-        <div class="navbar-inner">
-          <a href="javascript:void(0)" class="brand">CVSS score calculator</a>
-          <ul class="nav pull-right">
-            <li>
-              <%= link_to main_app.root_path do %>
-              Back to the app  &rarr;
-              <% end %>
-            </li>
-          </ul>
-        </div>
-      </div>
+      <nav class="navbar navbar-light bg-light">
+        <a href="javascript:void(0)" class="navbar-brand">CVSS score calculator</a>
+        <ul class="navbar-nav pull-right">
+          <li class="nav-item">
+            <%= link_to main_app.root_path, class: 'nav-link' do %>
+            Back to the app  &rarr;
+            <% end %>
+          </li>
+        </ul>
+      </nav>
 
       <%= yield%>
     </div>

data/lib/dradis/plugins/calculators/cvss/gem_version.rb

@@ -9,7 +9,7 @@ module Dradis
 
         module VERSION
           MAJOR = 3
-          MINOR = 14
+          MINOR = 19
           TINY = 0
           PRE = nil
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dradis-calculator_cvss
 version: !ruby/object:Gem::Version
-  version: 3.14.0
+  version: 3.19.0
 platform: ruby
 authors:
 - Daniel Martin
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-08-13 00:00:00.000000000 Z
+date: 2020-09-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dradis-plugins
@@ -69,8 +69,8 @@ files:
 - README.md
 - Rakefile
 - app/assets/javascripts/dradis/plugins/calculators/cvss/calculator.js.coffee
-- app/assets/javascripts/dradis/plugins/calculators/cvss/manifests/application.js.coffee
-- app/assets/javascripts/dradis/plugins/calculators/cvss/manifests/snowcrash.js.coffee
+- app/assets/javascripts/dradis/plugins/calculators/cvss/manifests/application.js
+- app/assets/javascripts/dradis/plugins/calculators/cvss/manifests/tylium.js
 - app/assets/javascripts/dradis/plugins/calculators/cvss/vendor/cvsscalc30.js
 - app/assets/stylesheets/dradis/plugins/calculators/cvss/manifests/application.css.scss
 - app/controllers/dradis/plugins/calculators/cvss/base_controller.rb
@@ -111,7 +111,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.3
+rubygems_version: 3.0.1
 signing_key: 
 specification_version: 4
 summary: This plugin adds a CVSSv3 score calculator to Dradis.