dradis-calculator_cvss 4.11.0 → 4.12.0

data/app/views/dradis/plugins/calculators/cvss/base/_environmental.html.erb

@@ -1,192 +0,0 @@
-<section data-behavior="cvss-buttons">
-
-  <div class="row">
-
-    <div class="col-6">
-      <div class="inner">
-        <h5 class="header-underline mt-0" data-cvss="CR_Heading">Confidentiality Req. (CR)</h5>
-
-        <%= hidden_field_tag :cr, @cvss_vector['CR'] %>
-
-        <div class="btn-group mb-4">
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['CR'] == 'X' %>" name="cr" value="X" data-label="Not Defined" data-cvss="CR_X_Label">N/D <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['CR'] == 'L' %>" name="cr" value="L" data-label="Low" data-cvss="CR_L_Label">Low <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['CR'] == 'M' %>" name="cr" value="M" data-label="Medium" data-cvss="CR_M_Label">Med <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['CR'] == 'H' %>" name="cr" value="H" data-label="High" data-cvss="CR_H_Label">High <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-        </div>
-      </div>
-
-      <div class="inner">
-        <h5 class="header-underline mt-0" data-cvss="IR_Heading">Integrity Req. (IR)</h5>
-
-        <%= hidden_field_tag :ir, @cvss_vector['IR'] %>
-
-        <div class="btn-group mb-4">
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['IR'] == 'X' %>" name="ir" value="X" data-label="Not Defined" data-cvss="IR_X_Label">N/D <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['IR'] == 'L' %>" name="ir" value="L" data-label="Low" data-cvss="IR_L_Label">Low <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['IR'] == 'M' %>" name="ir" value="M" data-label="Medium" data-cvss="IR_M_Label">Med <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['IR'] == 'H' %>" name="ir" value="H" data-label="High" data-cvss="IR_H_Label">High <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-        </div>
-      </div>
-
-      <div class="inner">
-        <h5 class="header-underline mt-0" data-cvss="AR_Heading">Availability Req. (AR)</h5>
-
-        <%= hidden_field_tag :ar, @cvss_vector['AR'] %>
-
-        <div class="btn-group mb-4">
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['AR'] == 'X' %>" name="ar" value="X" data-label="Not Defined" data-cvss="AR_X_Label">N/D <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['AR'] == 'L' %>" name="ar" value="L" data-label="Low" data-cvss="AR_L_Label">Low <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['AR'] == 'M' %>" name="ar" value="M" data-label="Medium" data-cvss="AR_M_Label">Med <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['AR'] == 'H' %>" name="ar" value="H" data-label="High" data-cvss="AR_H_Label">High <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-        </div>
-      </div>
-    </div>
-
-    <div class="col-6">
-
-      <div class="inner">
-        <h5 class="header-underline mt-0" data-cvss="MAV_Heading">Mod. Attack Vector (MAV)</h5>
-
-        <%= hidden_field_tag :mav, @cvss_vector['MAV'] %>
-
-        <div class="btn-group mb-4">
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['MAV'] == 'X' %>" name="mav" value="X" data-label="Not Defined" data-cvss="MAV_X_Label">N/D <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['MAV'] == 'N' %>" name="mav" value="N" data-label="Network" data-cvss="MAV_N_Label">Net. <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['MAV'] == 'A' %>" name="mav" value="A" data-label="Adjacent" data-cvss="MAV_A_Label">Adjacent <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['MAV'] == 'L' %>" name="mav" value="L" data-label="Local" data-cvss="MAV_L_Label">Local <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['MAV'] == 'P' %>" name="mav" value="P" data-label="Physical" data-cvss="MAV_P_Label">Physical <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-        </div>
-      </div>
-
-      <div class="inner">
-        <h5 class="header-underline mt-0" data-cvss="MAC_Heading">Mod. Attack Complexity (MAC)</h5>
-
-        <%= hidden_field_tag :mac, @cvss_vector['MAC'] %>
-
-        <div class="btn-group mb-4">
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['MAC'] == 'X' %>" name="mac" value="X" data-label="Not Defined" data-cvss="MAC_X_Label">N/D <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['MAC'] == 'L' %>" name="mac" value="L" data-label="Low" data-cvss="MAC_L_Label">Low <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['MAC'] == 'H' %>" name="mac" value="H" data-label="High" data-cvss="MAC_H_Label">High <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-        </div>
-      </div>
-
-      <div class="inner">
-        <h5 class="header-underline mt-0" data-cvss="MPR_Heading">Mod. Privileges Required (MPR)</h5>
-
-        <%= hidden_field_tag :mpr, @cvss_vector['MPR'] %>
-
-        <div class="btn-group mb-4">
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['MPR'] == 'X' %>" name="mpr" value="X" data-label="Not Defined" data-cvss="MPR_X_Label">N/D <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['MPR'] == 'N' %>" name="mpr" value="N" data-label="None" data-cvss="MPR_N_Label">None <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['MPR'] == 'L' %>" name="mpr" value="L" data-label="Low" data-cvss="MPR_L_Label">Low <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['MPR'] == 'H' %>" name="mpr" value="H" data-label="High" data-cvss="MPR_H_Label">High <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-        </div>
-      </div>
-
-      <div class="inner">
-        <h5 class="header-underline mt-0" data-cvss="MUI_Heading">Mod. User Interaction (MUI)</h5>
-
-        <%= hidden_field_tag :mui, @cvss_vector['MUI'] %>
-
-        <div class="btn-group mb-4">
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['MUI'] == 'X' %>" name="mui" value="X" data-label="Not Defined" data-cvss="MUI_X_Label">N/D <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['MUI'] == 'N' %>" name="mui" value="N" data-label="None" data-cvss="MUI_N_Label">None <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['MUI'] == 'R' %>" name="mui" value="R" data-label="Required" data-cvss="MUI_R_Label">Required <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-        </div>
-      </div>
-
-      <div class="inner">
-        <h5 class="header-underline mt-0" data-cvss="MS_Heading">Mod. Scope (MS)</h5>
-
-        <%= hidden_field_tag :ms, @cvss_vector['MS'] %>
-
-        <div class="btn-group mb-4">
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['MS'] == 'X' %>" name="ms" value="X" data-label="Not Defined" data-cvss="MS_X_Label">N/D <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['MS'] == 'U' %>" name="ms" value="U" data-label="Unchanged" data-cvss="MS_U_Label">Unchanged <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['MS'] == 'C' %>" name="ms" value="C" data-label="Changed" data-cvss="MS_C_Label">Changed <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-        </div>
-      </div>
-
-      <div class="inner">
-        <h5 class="header-underline mt-0" data-cvss="MC_Heading">Mod. Confidentiality (MC)</h5>
-
-        <%= hidden_field_tag :mc, @cvss_vector['MC'] %>
-
-        <div class="btn-group mb-4">
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['MC'] == 'X' %>" name="mc" value="X" data-label="Not Defined" data-cvss="MC_X_Label">N/D <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['MC'] == 'N' %>" name="mc" value="N" data-label="None" data-cvss="MC_N_Label">None <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['MC'] == 'L' %>" name="mc" value="L" data-label="Low" data-cvss="MC_L_Label">Low<i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['MC'] == 'H' %>" name="mc" value="H" data-label="High" data-cvss="MC_H_Label">High <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-        </div>
-      </div>
-
-      <div class="inner">
-        <h5 class="header-underline mt-0" data-cvss="MI_Heading">Mod. Integrity (MI)</h5>
-
-        <%= hidden_field_tag :mi, @cvss_vector['MI'] %>
-
-        <div class="btn-group mb-4">
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['MI'] == 'X' %>" name="mi" value="X" data-label="Not Defined" data-cvss="MI_X_Label">N/D <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['MI'] == 'N' %>" name="mi" value="N" data-label="None" data-cvss="MI_N_Label">None <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['MI'] == 'L' %>" name="mi" value="L" data-label="Low" data-cvss="MI_L_Label">Low <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['MI'] == 'H' %>" name="mi" value="H" data-label="High" data-cvss="MI_H_Label">High <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-        </div>
-      </div>
-
-      <div class="inner">
-        <h5 class="header-underline mt-0" data-cvss="MA_Heading">Mod. Availability (MA)</h5>
-
-        <%= hidden_field_tag :ma, @cvss_vector['MA'] %>
-
-        <div class="btn-group mb-4">
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['MA'] == 'X' %>" name="ma" value="X" data-label="Not Defined" data-cvss="MA_X_Label">N/D <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['MA'] == 'N' %>" name="ma" value="N" data-label="None" data-cvss="MA_N_Label">None <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['MA'] == 'L' %>" name="ma" value="L" data-label="Low" data-cvss="MA_L_Label">Low <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-          <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['MA'] == 'H' %>" name="ma" value="H" data-label="High" data-cvss="MA_H_Label">High <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-        </div>
-      </div>
-    </div>
-
-  </div>
-
-  <p>
-    These metrics enable the analyst to customize the CVSS score depending on
-    the importance of the affected IT asset to a user's organization, measured
-    in terms of complementary/alternative security controls in place,
-    Confidentiality, Integrity, and Availability. The metrics are the modified
-    equivalent of base metrics and are assigned metric values based on the
-    component placement in organization infrastructure.
-  </p>
-</section>

data/app/views/dradis/plugins/calculators/cvss/base/_temporal.html.erb

@@ -1,67 +0,0 @@
-<section data-behavior="cvss-buttons">
-
-  <div class="inner">
-    <h5 class="header-underline mt-0" data-cvss="E_Heading">
-      Exploit Code Maturity (E)
-    </h5>
-
-    <%= hidden_field_tag :e, @cvss_vector['E'] %>
-
-    <div class="btn-group mb-4">
-      <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['E'] == 'X' %>" name="e" value="X" data-label="Not Defined" data-cvss="E_X_Label">Not Defined <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-      <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['E'] == 'U' %>" name="e" value="U" data-label="Unproven" data-cvss="E_U_Label">Unproven <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-      <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['E'] == 'P' %>" name="e" value="P" data-label="Proof-of-Concept" data-cvss="E_P_Label">Proof-of-Concept <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-      <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['E'] == 'F' %>" name="e" value="F" data-label="Functional" data-cvss="E_F_Label">Functional <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-      <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['E'] == 'H' %>" name="e" value="H" data-label="High" data-cvss="E_H_Label">High <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-    </div>
-  </div>
-
-  <div class="inner">
-    <h5 class="header-underline mt-0" data-cvss="RL_Heading">
-      Remediation Level (RL)
-    </h5>
-
-    <%= hidden_field_tag :rl, @cvss_vector['RL'] %>
-
-    <div class="btn-group mb-4">
-      <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['RL'] == 'X' %>" name="rl" value="X" data-label="Not Defined" data-cvss="RL_X_Label">Not Defined <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-      <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['RL'] == 'O' %>" name="rl" value="O" data-label="Official Fix" data-cvss="RL_O_Label">Official Fix <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-      <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['RL'] == 'T' %>" name="rl" value="T" data-label="Temporary Fix" data-cvss="RL_T_Label">Temporary Fix <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-      <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['RL'] == 'W' %>" name="rl" value="W" data-label="Workaround" data-cvss="RL_W_Label">Workaround <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-      <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['RL'] == 'U' %>" name="rl" value="U" data-label="Unavailable" data-cvss="RL_U_Label">Unavailable <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-    </div>
-  </div>
-
-  <div class="inner">
-    <h5 class="header-underline mt-0" data-cvss="RC_Heading">
-      Report Confidence (RC)
-    </h5>
-
-    <%= hidden_field_tag :rc, @cvss_vector['RC'] %>
-
-    <div class="btn-group mb-4">
-      <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['RC'] == 'X' %>" name="rc" value="X" data-label="Not Defined" data-cvss="RC_X_Label">Not Defined <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-      <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['RC'] == 'U' %>" name="rc" value="U" data-label="Unknown" data-cvss="RC_U_Label">Unknown <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-      <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['RC'] == 'R' %>" name="rc" value="R" data-label="Reasonable" data-cvss="RC_R_Label">Reasonable <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-
-      <button type="button" class="btn <%= 'active btn-primary' if @cvss_vector['RC'] == 'C' %>" name="rc" value="C" data-label="Confirmed" data-cvss="RC_C_Label">Confirmed <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
-    </div>
-
-  </div>
-
-  <p>
-    The Temporal metrics measure the current state of exploit techniques or code
-    availability, the existence of any patches or workarounds, or the confidence
-    that one has in the description of a vulnerability.
-  </p>
-</section>