dradis-calculator_cvss 4.10.0 → 4.12.0

data/app/views/dradis/plugins/calculators/cvss/base/v4/_environmental.html.erb

@@ -0,0 +1,220 @@
+<section data-behavior="cvss-buttons" data-cvss-version="4" data-cvss-metrics="Environmental (Modified Base Metrics)">
+  <div class="row">
+
+    <div class="col-12 col-xl-6" data-cvss-metric-group="Exploitability Metrics">
+      <h5 class="mb-3 fw-bold">Exploitability Metrics</h4>
+      <h5 class="header-underline mt-0 align-items-center gap-2" data-cvss-heading="Attack Vector (MAV)">Attack Vector (MAV) <i class="fa-regular fa-question-circle small" aria-hidden="true"></i></h5>
+
+      <%= hidden_field_tag :mav, @cvss4_vector['MAV'] %>
+
+      <div class="btn-group mb-4">
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MAV'] == 'X' %>" name="mav" value="X" data-cvss-option="Not Defined (X)">Not Defined (X) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MAV'] == 'N' %>" name="mav" value="N" data-cvss-option="Network (N)">Network (N) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MAV'] == 'A' %>" name="mav" value="A" data-cvss-option="Adjacent (A)">Adjacent (A) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MAV'] == 'L' %>" name="mav" value="L" data-cvss-option="Local (L)">Local (L) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MAV'] == 'P' %>" name="mav" value="P" data-cvss-option="Physical (P)">Physical (P) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+      </div>
+
+      <h5 class="header-underline mt-0 align-items-center gap-2" data-cvss-heading="Attack Complexity (MAC)">Attack Complexity (MAC) <i class="fa-regular fa-question-circle small" aria-hidden="true"></i></h5>
+
+      <%= hidden_field_tag :mac, @cvss4_vector['MAC'] %>
+
+      <div class="btn-group mb-4">
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MAC'] == 'X' %>" name="mac" value="X" data-cvss-option="Not Defined (X)">Not Defined (X) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MAC'] == 'L' %>" name="mac" value="L" data-cvss-option="Low (L)">Low (L) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MAC'] == 'H' %>" name="mac" value="H" data-cvss-option="High (H)">High (H) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+      </div>
+
+      <h5 class="header-underline mt-0 align-items-center gap-2" data-cvss-heading="Attack Requirements (MAT)">Attack Requirements (MAT) <i class="fa-regular fa-question-circle small" aria-hidden="true"></i></h5>
+
+      <%= hidden_field_tag :mat, @cvss4_vector['MAT'] %>
+
+      <div class="btn-group mb-4">
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MAT'] == 'X' %>" name="mat" value="X" data-cvss-option="Not Defined (X)">Not Defined (X) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MAT'] == 'N' %>" name="mat" value="N" data-cvss-option="None (N)">None (N) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MAT'] == 'P' %>" name="mat" value="P" data-cvss-option="Present (P)">Present (P) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+      </div>
+
+      <h5 class="header-underline mt-0 align-items-center gap-2" data-cvss-heading="Privileges Required (MPR)">Privileges Required (MPR) <i class="fa-regular fa-question-circle small" aria-hidden="true"></i></h5>
+
+      <%= hidden_field_tag :mpr, @cvss4_vector['MPR'] %>
+
+      <div class="btn-group mb-4">
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MPR'] == 'X' %>" name="mpr" value="X" data-cvss-option="Not Defined (X)">Not Defined (X) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MPR'] == 'N' %>" name="mpr" value="N" data-cvss-option="None (N)">None (N) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MPR'] == 'L' %>" name="mpr" value="L" data-cvss-option="Low (L)">Low (L) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MPR'] == 'H' %>" name="mpr" value="H" data-cvss-option="High (H)">High (H) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+      </div>
+
+      <h5 class="header-underline mt-0 align-items-center gap-2" data-cvss-heading="User Interaction (MUI)">User Interaction (MUI) <i class="fa-regular fa-question-circle small" aria-hidden="true"></i></h5>
+
+      <%= hidden_field_tag :mui, @cvss4_vector['MUI'] %>
+
+      <div class="btn-group mb-5">
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MUI'] == 'X' %>" name="mui" value="X" data-cvss-option="Not Defined (X)">Not Defined (X) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MUI'] == 'N' %>" name="mui" value="N" data-cvss-option="None (N)">None (N) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MUI'] == 'P' %>" name="mui" value="P" data-cvss-option="Passive (P)">Passive (P) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MUI'] == 'A' %>" name="mui" value="A" data-cvss-option="Active (A)">Active (A) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+      </div>
+
+    </div>
+
+    <div class="col-12 col-xl-6" data-cvss-metric-group="Vulnerable System Impact Metrics">
+      <h5 class="mb-3 fw-bold">Vulnerable System Impact Metrics</h4>
+
+      <h5 class="header-underline mt-0 align-items-center gap-2" data-cvss-heading="Confidentiality (MVC)">Confidentiality (MVC) <i class="fa-regular fa-question-circle small" aria-hidden="true"></i></h5>
+
+      <%= hidden_field_tag :mvc, @cvss4_vector['MVC'] %>
+
+      <div class="btn-group mb-4">
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MVC'] == 'X' %>" name="mvc" value="X" data-cvss-option="Not Defined (X)">Not Defined (X) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MVC'] == 'H' %>" name="mvc" value="H" data-cvss-option="High (H)">High (H) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MVC'] == 'L' %>" name="mvc" value="L" data-cvss-option="Low (L)">Low (L) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MVC'] == 'N' %>" name="mvc" value="N" data-cvss-option="None (N)">None (N) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+      </div>
+
+      <h5 class="header-underline mt-0 align-items-center gap-2" data-cvss-heading="Integrity (MVI)">Integrity (MVI) <i class="fa-regular fa-question-circle small" aria-hidden="true"></i></h5>
+
+      <%= hidden_field_tag :mvi, @cvss4_vector['MVI'] %>
+
+      <div class="btn-group mb-4">
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MVI'] == 'X' %>" name="mvi" value="X" data-cvss-option="Not Defined (X)">Not Defined (X) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MVI'] == 'H' %>" name="mvi" value="H" data-cvss-option="High (H)">High (H) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MVI'] == 'L' %>" name="mvi" value="L" data-cvss-option="Low (L)">Low (L) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MVI'] == 'N' %>" name="mvi" value="N" data-cvss-option="None (N)">None (N) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+      </div>
+
+      <h5 class="header-underline mt-0 align-items-center gap-2" data-cvss-heading="Availability (MVA)">Availability (MVA) <i class="fa-regular fa-question-circle small" aria-hidden="true"></i></h5>
+
+      <%= hidden_field_tag :mva, @cvss4_vector['MVA'] %>
+
+      <div class="btn-group mb-5">
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MVA'] == 'X' %>" name="mva" value="X" data-cvss-option="Not Defined (X)">Not Defined (X) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MVA'] == 'H' %>" name="mva" value="H" data-cvss-option="High (H)">High (H) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MVA'] == 'L' %>" name="mva" value="L" data-cvss-option="Low (L)">Low (L) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MVA'] == 'N' %>" name="mva" value="N" data-cvss-option="None (N)">None (N) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+      </div>
+
+    </div>
+
+    <div class="col-12 col-xl-6" data-cvss-metric-group="Subsequent System Impact Metrics">
+      <h5 class="mb-3 fw-bold">Subsequent System Impact Metrics</h4>
+
+      <h5 class="header-underline mt-0 align-items-center gap-2" data-cvss-heading="Confidentiality (MSC)">Confidentiality (MSC) <i class="fa-regular fa-question-circle small" aria-hidden="true"></i></h5>
+
+      <%= hidden_field_tag :msc, @cvss4_vector['MSC'] %>
+
+      <div class="btn-group mb-4">
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MSC'] == 'X' %>" name="msc" value="X" data-cvss-option="Not Defined (X)">Not Defined (X) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MSC'] == 'H' %>" name="msc" value="H" data-cvss-option="High (H)">High (H) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MSC'] == 'L' %>" name="msc" value="L" data-cvss-option="Low (L)">Low (L) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MSC'] == 'N' %>" name="msc" value="N" data-cvss-option="Negligible (N)">Negligible (N) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+      </div>
+
+      <h5 class="header-underline mt-0 align-items-center gap-2" data-cvss-heading="Integrity (MSI)">Integrity (MSI) <i class="fa-regular fa-question-circle small" aria-hidden="true"></i></h5>
+
+      <%= hidden_field_tag :msi, @cvss4_vector['SI'] %>
+
+      <div class="btn-group mb-4">
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MSI'] == 'X' %>" name="msi" value="X" data-cvss-option="Not Defined (X)">Not Defined (X) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MSI'] == 'S' %>" name="msi" value="S" data-cvss-option="Safety (S)">Safety (S) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MSI'] == 'H' %>" name="msi" value="H" data-cvss-option="High (H)">High (H) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MSI'] == 'L' %>" name="msi" value="L" data-cvss-option="Low (L)">Low (L) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MSI'] == 'N' %>" name="msi" value="N" data-cvss-option="Negligible (N)">Negligible (N) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+      </div>
+
+      <h5 class="header-underline mt-0 align-items-center gap-2" data-cvss-heading="Availability (MSA)">Availability (MSA) <i class="fa-regular fa-question-circle small" aria-hidden="true"></i></h5>
+
+      <%= hidden_field_tag :msa, @cvss4_vector['MSA'] %>
+
+      <div class="btn-group mb-5 mb-xl-0">
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MSA'] == 'X' %>" name="msa" value="X" data-cvss-option="Not Defined (X)">Not Defined (X) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MSA'] == 'S' %>" name="msa" value="S" data-cvss-option="Safety (S)">Safety (S) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MSA'] == 'H' %>" name="msa" value="H" data-cvss-option="High (H)">High (H) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MSA'] == 'L' %>" name="msa" value="L" data-cvss-option="Low (L)">Low (L) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['MSA'] == 'N' %>" name="msa" value="N" data-cvss-option="Negligible (N)">Negligible (N) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+      </div>
+
+    </div>
+
+    <div class="col-12 col-xl-6" data-cvss-metric-group="Environmental (Security Requirements)">
+      <h5 class="mb-3 fw-bold">Security Requirements</h4>
+
+      <h5 class="header-underline mt-0 align-items-center gap-2" data-cvss-heading="Confidentiality Requirements (CR)">Confidentiality Requirements (CR) <i class="fa-regular fa-question-circle small" aria-hidden="true"></i></h5>
+
+      <%= hidden_field_tag :cr, @cvss4_vector['CR'] %>
+
+      <div class="btn-group mb-4">
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['CR'] == 'X' %>" name="cr" value="X" data-label="Not Defined" data-cvss-option="Not Defined (X)">Not Defined (X) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['CR'] == 'H' %>" name="cr" value="H" data-cvss-option="High (H)">High (H) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['CR'] == 'M' %>" name="cr" value="M" data-cvss-option="Medium (M)">Medium (M) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['CR'] == 'L' %>" name="cr" value="L" data-cvss-option="Low (L)">Low (L) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+      </div>
+
+      <h5 class="header-underline mt-0 align-items-center gap-2" data-cvss-heading="Integrity Requirements (IR)">Integrity Requirements (IR) <i class="fa-regular fa-question-circle small" aria-hidden="true"></i></h5>
+
+      <%= hidden_field_tag :ir, @cvss4_vector['IR'] %>
+
+      <div class="btn-group mb-4">
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['IR'] == 'X' %>" name="ir" value="X" data-cvss-option="Not Defined (X)">Not Defined (X) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['IR'] == 'H' %>" name="ir" value="H" data-cvss-option="High (H)">High (H) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['IR'] == 'M' %>" name="ir" value="M" data-cvss-option="Medium (M)">Medium (M) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['IR'] == 'L' %>" name="ir" value="L" data-cvss-option="Low (L)">Low (L) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+      </div>
+
+      <h5 class="header-underline mt-0 align-items-center gap-2" data-cvss-heading="Availability Requirements (AR)">Availability Requirements (AR) <i class="fa-regular fa-question-circle small" aria-hidden="true"></i></h5>
+
+      <%= hidden_field_tag :ar, @cvss4_vector['AR'] %>
+
+      <div class="btn-group">
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['AR'] == 'X' %>" name="ar" value="X" data-cvss-option="Not Defined (X)">Not Defined (X) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['AR'] == 'H' %>" name="ar" value="H" data-cvss-option="High (H)">High (H) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['AR'] == 'M' %>" name="ar" value="M" data-cvss-option="Medium (M)">Medium (M) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['AR'] == 'L' %>" name="ar" value="L" data-cvss-option="Low (L)">Low (L) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+      </div>
+    </div>
+  </div>
+</section>

data/app/views/dradis/plugins/calculators/cvss/base/v4/_index.html.erb

@@ -0,0 +1,82 @@
+<div class="row">
+  <div class="col-lg-8">
+    <h3 class="border-bottom border-dark border-opacity-25 pb-1">
+      Base
+    </h3>
+    <%= render 'dradis/plugins/calculators/cvss/base/v4/base' %>
+
+    <h3 class="mt-5 border-bottom border-dark border-opacity-25 pb-1">
+      Supplemental
+    </h3>
+    <%= render 'dradis/plugins/calculators/cvss/base/v4/supplemental' %>
+
+    <h3 class="mt-5 border-bottom border-dark border-opacity-25 pb-1">
+      Environmental
+    </h3>
+    <%= render 'dradis/plugins/calculators/cvss/base/v4/environmental' %>
+
+    <h3 class="mt-5 border-bottom border-dark border-opacity-25 pb-1">
+      Threat
+    </h3>
+    <div class="mb-4"><%= render 'dradis/plugins/calculators/cvss/base/v4/threat' %></div>
+  </div>
+
+  <div class="col-lg-4" id="cvss4-edit-result" data-behavior="cvss4-result-text">
+    <h3>
+      Result: <span id="cvss4-score" data-behavior="cvss4-result">0.0 (None)</span>
+    </h3>
+    <textarea name="cvss_fields" rows="52" class="form-control mb-4">#[CVSSv4.Vector]#
+N/A
+
+#[CVSSv4.BaseScore]#
+N/A
+
+#[CVSSv4.BaseSeverity]#
+N/A
+
+#[CVSSv4.MacroVector]#
+#[CVSSv4.Expoitability]#
+#[CVSSv4.Complexity]#
+#[CVSSv4.VulnerableSystem]#
+#[CVSSv4.SubsequentSystem]#
+#[CVSSv4.Exploitation]#
+#[CVSSv4.SecurityRequirements]#
+
+#[CVSSv4.BaseExploitableAttackVector]#
+#[CVSSv4.BaseExploitableAttackComplexity]#
+#[CVSSv4.BaseExploitableAttackRequirements]#
+#[CVSSv4.BaseExploitablePrivilegesRequired]#
+#[CVSSv4.BaseExploitableUserInteraction]#
+#[CVSSv4.BaseVulnerableConfidentiality]#
+#[CVSSv4.BaseVulnerableIntegrity]#
+#[CVSSv4.BaseVulnerableAvailability]#
+#[CVSSv4.BaseSubsequentConfidentiality]#
+#[CVSSv4.BaseSubsequentIntegrity]#
+#[CVSSv4.BaseSubsequentAvailability]#
+
+#[CVSSv4.SupplementalSafety]#
+#[CVSSv4.SupplementalAutomatable]#
+#[CVSSv4.SupplementalRecovery]#
+#[CVSSv4.SupplementalValueDensity]#
+#[CVSSv4.SupplementalVulnerabilityResponseEffort]#
+#[CVSSv4.SupplementalProviderUrgency]#
+
+#[CVSSv4.EnvironmentalExploitabilityAttackVector]#
+#[CVSSv4.EnvironmentalExploitabilityAttackComplexity]#
+#[CVSSv4.EnvironmentalExploitabilityAttackRequirements]#
+#[CVSSv4.EnvironmentalExploitabilityPrivilegesRequired]#
+#[CVSSv4.EnvironmentalExploitabilityUserInteraction]#
+#[CVSSv4.EnvironmentalVulnerableConfidentiality]#
+#[CVSSv4.EnvironmentalVulnerableIntegrity]#
+#[CVSSv4.EnvironmentalVulnerableAvailability]#
+#[CVSSv4.EnvironmentalSubsequentConfidentiality]#
+#[CVSSv4.EnvironmentalSubsequentIntegrity]#
+#[CVSSv4.EnvironmentalSubsequentAvailability]#
+#[CVSSv4.EnvironmentalConfidentialityRequirements]#
+#[CVSSv4.EnvironmentalIntegrityRequirements]#
+#[CVSSv4.EnvironmentalAvailabilityRequirements]#
+
+#[CVSSv4.ThreatExploitMaturity]#
+    </textarea>
+  </div>
+</div>

data/app/views/dradis/plugins/calculators/cvss/base/v4/_supplemental.html.erb

@@ -0,0 +1,85 @@
+<section data-behavior="cvss-buttons" data-cvss-version="4" data-cvss-metrics="Supplemental Metrics">
+  <div class="row">
+    <div class="col-12" data-cvss-metric-group="none">
+      <h5 class="header-underline mt-0 align-items-center gap-2" data-cvss-heading="Safety (S)">Safety (S) <i class="fa-regular fa-question-circle small" aria-hidden="true"></i></h5>
+
+      <%= hidden_field_tag :s, @cvss4_vector['S'] %>
+
+      <div class="btn-group mb-4">
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['S'] == 'X' %>" name="s" value="X" data-cvss-option="Not Defined (X)">Not Defined (X) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['S'] == 'N' %>" name="s" value="N" data-cvss-option="Negligible (N)">Negligible (N) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['S'] == 'P' %>" name="s" value="P" data-cvss-option="Present (P)">Present (P) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+      </div>
+
+      <h5 class="header-underline mt-0" data-cvss-heading="Automatable (AU)">Automatable (AU) <i class="fa-regular fa-question-circle small" aria-hidden="true"></i></h5>
+
+      <%= hidden_field_tag :au, @cvss4_vector['AU'] %>
+
+      <div class="btn-group mb-4">
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['AU'] == 'X' %>" name="au" value="X" data-cvss-option="Not Defined (X)">Not Defined (X) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['AU'] == 'N' %>" name="au" value="N" data-cvss-option="No (N)">No (N) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['AU'] == 'Y' %>" name="au" value="Y" data-cvss-option="Yes (Y)">Yes (Y) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+      </div>
+
+      <h5 class="header-underline mt-0" data-cvss-heading="Recovery (R)">Recovery (R) <i class="fa-regular fa-question-circle small" aria-hidden="true"></i></h5>
+
+      <%= hidden_field_tag :r, @cvss4_vector['R'] %>
+
+      <div class="btn-group mb-4">
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['R'] == 'X' %>" name="r" value="X" data-cvss-option="Not Defined (X)">Not Defined (X) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['R'] == 'A' %>" name="r" value="A"  data-cvss-option="Automatic (A)">Automatic (A) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['R'] == 'U' %>" name="r" value="U" data-cvss-option="User (U)">User (U) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['R'] == 'I' %>" name="r" value="I" data-cvss-option="Irrecoverable (I)">Irrecoverable (I) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+      </div>
+
+      <h5 class="header-underline mt-0" data-cvss-heading="Value Density (V)">Value Density (V) <i class="fa-regular fa-question-circle small" aria-hidden="true"></i></h5>
+
+      <%= hidden_field_tag :v, @cvss4_vector['V'] %>
+
+      <div class="btn-group mb-4">
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['V'] == 'X' %>" name="v" value="X" data-cvss-option="Not Defined (X)">Not Defined (X) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['V'] == 'D' %>" name="v" value="D" data-cvss-option="Diffuse (D)">Diffuse (D) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['V'] == 'C' %>" name="v" value="C" data-cvss-option="Concentrated (C)">Concentrated (C) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+      </div>
+
+      <h5 class="header-underline mt-0" data-cvss-heading="Vulnerability Response Effort (RE)">Vulnerability Response Effort (RE) <i class="fa-regular fa-question-circle small" aria-hidden="true"></i></h5>
+
+      <%= hidden_field_tag :re, @cvss4_vector['RE'] %>
+
+      <div class="btn-group mb-4">
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['RE'] == 'X' %>" name="re" value="X" data-cvss-option="Not Defined (X)">Not Defined (X) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['RE'] == 'L' %>" name="re" value="L" data-cvss-option="Low (L)">Low (L) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['RE'] == 'M' %>" name="re" value="M" data-cvss-option="Moderate (M)">Moderate (M) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['RE'] == 'H' %>" name="re" value="H" data-cvss-option="High (H)">High (H) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+      </div>
+
+      <h5 class="header-underline mt-0" data-cvss-heading="Provider Urgency (U)">Provider Urgency (U) <i class="fa-regular fa-question-circle small" aria-hidden="true"></i></h5>
+
+      <%= hidden_field_tag :u, @cvss4_vector['U'] %>
+
+      <div class="btn-group">
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['U'] == 'X' %>" name="u" value="X" data-cvss-option="Not Defined (X)">Not Defined (X) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['U'] == 'Clear' %>" name="u" value="Clear" data-cvss-option="Clear">Clear <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['U'] == 'Green' %>" name="u" value="Green" data-cvss-option="Green">Green <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['U'] == 'Amber' %>" name="u" value="Amber" data-cvss-option="Amber">Amber <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['U'] == 'Red' %>" name="u" value="Red" data-cvss-option="Red">Red <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+      </div>
+    </div>
+  </div>
+</section>

data/app/views/dradis/plugins/calculators/cvss/base/v4/_threat.html.erb

@@ -0,0 +1,19 @@
+<section data-behavior="cvss-buttons" data-cvss-version="4" data-cvss-metrics="Threat Metrics">
+  <div class="row">
+    <div class="col-12" data-cvss-metric-group="none">
+      <h5 class="header-underline mt-0 align-items-center gap-2" data-cvss-heading="Exploit Maturity (E)">Exploit Maturity (E) <i class="fa-regular fa-question-circle small" aria-hidden="true"></i></h5>
+
+      <%= hidden_field_tag :e, @cvss4_vector['E'] %>
+
+      <div class="btn-group">
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['E'] == 'X' %>" name="e" value="X" data-cvss-option="Not Defined (X)">Not Defined (X) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['E'] == 'A' %>" name="e" value="A" data-cvss-option="Attacked (A)">Attacked (A) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['E'] == 'P' %>" name="e" value="P" data-cvss-option="POC (P)">POC (P) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+
+        <button type="button" class="btn <%= 'active btn-primary' if @cvss4_vector['E'] == 'U' %>" name="e" value="U" data-cvss-option="Unreported (U)">Unreported (U) <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
+      </div>
+    </div>
+  </div>
+</section>

data/app/views/dradis/plugins/calculators/cvss/issues/_show-content.html.erb

@@ -9,13 +9,27 @@
     </h4>
 
     <div class="mb-4 content-textile">
-      <%=
-        markup(
-          @issue.fields
-            .select { |k,v| Dradis::Plugins::Calculators::CVSS::V3::FIELDS.include?(k) }
-            .map { |k,v| "#[#{k}]#\n#{v}" }.join("\n\n")
-        )
-      %>
+      <% if @issue.fields['CVSSv4.BaseVector'] %>
+        <%=
+          markup(
+            @issue.fields
+              .select { |k,v| Dradis::Plugins::Calculators::CVSS::V4::FIELDS.include?(k) }
+              .map { |k,v| "#[#{k}]#\n#{v}" }.join("\n\n")
+          )
+        %>
+      <% end%>
+
+      <br>
+
+      <% if @issue.fields['CVSSv3.Vector'] %>
+        <%=
+          markup(
+            @issue.fields
+              .select { |k,v| Dradis::Plugins::Calculators::CVSS::V3::FIELDS.include?(k) }
+              .map { |k,v| "#[#{k}]#\n#{v}" }.join("\n\n")
+          )
+        %>
+      <% end %>
     </div>
   </div>
 </div>

data/app/views/dradis/plugins/calculators/cvss/issues/edit/_v3.html.erb

@@ -0,0 +1,91 @@
+<div class="inner note-text-inner d-none" data-cvss-version="3">
+
+  <%= simple_form_for [:cvss, current_project, @issue] do |f| %>
+
+    <div class="alert alert-error" data-behavior="cvss-error">
+      <p><strong>Warning</strong>: all Base metrics are required</p>
+    </div>
+
+    <ul class="nav nav-pills w-100" id="cvss-tabs">
+      <li class="nav-item">
+        <a href="#cvss-edit-base" data-bs-toggle="pill" class="nav-link active">Base: <span id="base-score">0</span></a>
+      </li>
+      <li class="nav-item">
+        <a href="#cvss-edit-temporal" data-bs-toggle="pill" class="nav-link">Temporal: <span id="temporal-score">0</span></a>
+      </li>
+      <li class="nav-item">
+        <a href="#cvss-edit-environmental" data-bs-toggle="pill" class="nav-link">Environmental: <span id="environmental-score">0</span></a>
+      </li>
+      <li class="nav-item pull-right">
+        <a href="#cvss-edit-result" data-bs-toggle="pill" class="nav-link">Result</a>
+      </li>
+    </ul>
+
+    <div class="tab-content mt-4">
+      <div class="tab-pane active" id="cvss-edit-base">
+        <%= render 'dradis/plugins/calculators/cvss/base/v3/base' %>
+      </div>
+      <div class="tab-pane" id="cvss-edit-temporal">
+        <%= render 'dradis/plugins/calculators/cvss/base/v3/temporal' %>
+      </div>
+      <div class="tab-pane" id="cvss-edit-environmental">
+        <%= render 'dradis/plugins/calculators/cvss/base/v3/environmental' %>
+      </div>
+
+      <div class="tab-pane" id="cvss-edit-result">
+        <textarea class="form-control" name="cvss_fields" rows="10" style="width:95%">#[CVSSv3.Vector]#
+N/A
+
+#[CVSSv3.BaseScore]#
+N/A
+
+#[CVSSv3.BaseSeverity]#
+N/A
+
+#[CVSSv3.TemporalScore]#
+N/A
+
+#[CVSSv3.TemporalSeverity]#
+N/A
+
+#[CVSSv3.EnvironmentalScore]#
+N/A
+
+#[CVSSv3.EnvironmentalSeverity]#
+N/A
+
+#[CVSSv3.BaseAttackVector]#
+#[CVSSv3.BaseAttackComplexity]#
+#[CVSSv3.BasePrivilegesRequired]#
+#[CVSSv3.BaseUserInteraction]#
+#[CVSSv3.BaseScope]#
+#[CVSSv3.BaseConfidentiality]#
+#[CVSSv3.BaseIntegrity]#
+#[CVSSv3.BaseAvailability]#
+
+#[CVSSv3.TemporalExploitCodeMaturity]#
+#[CVSSv3.TemporalRemediationLevel]#
+#[CVSSv3.TemporalReportConfidence]#
+
+#[CVSSv3.EnvironmentalConfidentialityRequirement]#
+#[CVSSv3.EnvironmentalIntegrityRequirement]#
+#[CVSSv3.EnvironmentalAvailabilityRequirement]#
+
+#[CVSSv3.ModifiedAttackVector]#
+#[CVSSv3.ModifiedAttackComplexity]#
+#[CVSSv3.ModifiedPrivilegesRequired]#
+#[CVSSv3.ModifiedUserInteraction]#
+#[CVSSv3.ModifiedScope]#
+#[CVSSv3.ModifiedConfidentiality]#
+#[CVSSv3.ModifiedIntegrity]#
+#[CVSSv3.ModifiedAvailability]#
+        </textarea>
+      </div>
+    </div>
+
+    <div class="form-actions">
+      <%= f.button :submit, nil, class: 'btn btn-primary' %> or
+      <%= link_to 'Cancel', main_app.project_issue_path(current_project, @issue), class: 'cancel-link' %>
+    </div>
+  <% end %>
+</div>