dradis-calculator_cvss 4.14.0 → 4.16.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +77 -35
- data/app/assets/javascripts/dradis/plugins/calculators/cvss/cvss.js +1 -1
- data/app/assets/javascripts/dradis/plugins/calculators/cvss/manifests/application.js +0 -1
- data/app/assets/stylesheets/dradis/plugins/calculators/cvss/manifests/application.css.scss +2 -3
- data/app/assets/stylesheets/dradis/plugins/calculators/cvss/manifests/hera.scss +1 -0
- data/app/views/dradis/plugins/calculators/cvss/_tools_menu.html.erb +7 -1
- data/app/views/dradis/plugins/calculators/cvss/_version_menu.html.erb +1 -1
- data/app/views/dradis/plugins/calculators/cvss/base/v3/_environmental.html.erb +1 -1
- data/app/views/dradis/plugins/calculators/cvss/issues/edit.html.erb +15 -0
- data/app/views/layouts/dradis/plugins/calculators/cvss/base.html.erb +4 -3
- data/lib/dradis/plugins/calculators/cvss/engine.rb +7 -12
- data/lib/dradis/plugins/calculators/cvss/gem_version.rb +1 -1
- metadata +4 -4
- data/app/assets/stylesheets/dradis/plugins/calculators/cvss/manifests/tylium.scss +0 -1
- /data/app/assets/javascripts/dradis/plugins/calculators/cvss/manifests/{tylium.js → hera.js} +0 -0
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 7420c952000fe3b5911584ff2a5a27f1f08fcc3dd3d13ba0ab6885dab3c8c8ba
|
|
4
|
+
data.tar.gz: 2d88cdeafd8924b0787ab9869b0786a278700f2b1a3516a171fa15e732d82b07
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 8a0250c568f04aa98673bdbe418b28374afd18b2c4e3bdd24f7b3248b49953962626b198885909f4ffeaaed619063abe5718e5f1e8dd7b32a07547c8cf5852fb
|
|
7
|
+
data.tar.gz: ffb9c324d3a2181dbbc50bae4b3f341989b93eb1fda265f53a8843f5b8cc6a043657cead566eb71aadee3f0f9f3219fd3ebda3eb36c538f7361e37cb2230fc64
|
data/CHANGELOG.md
CHANGED
|
@@ -1,98 +1,140 @@
|
|
|
1
|
+
v4.16.0 (May 2025)
|
|
2
|
+
|
|
3
|
+
- Hera layout compatibility changes
|
|
4
|
+
- Update turbolinks references to turbo
|
|
5
|
+
- Improve navigation for contributors
|
|
6
|
+
|
|
7
|
+
v4.15.0 (December 2024)
|
|
8
|
+
|
|
9
|
+
- No changes
|
|
10
|
+
|
|
1
11
|
v4.14.0 (October 2024)
|
|
2
|
-
|
|
12
|
+
|
|
13
|
+
- No changes
|
|
3
14
|
|
|
4
15
|
v4.13.0 (July 2024)
|
|
5
|
-
|
|
16
|
+
|
|
17
|
+
- Add ability to enable/disable calculator in the Tools Manager
|
|
6
18
|
|
|
7
19
|
v4.12.0 (May 2024)
|
|
8
|
-
|
|
20
|
+
|
|
21
|
+
- Add CVSS v4 support
|
|
9
22
|
|
|
10
23
|
v4.11.0 (January 2024)
|
|
11
|
-
|
|
24
|
+
|
|
25
|
+
- No changes
|
|
12
26
|
|
|
13
27
|
v4.10.0 (September 2023)
|
|
14
|
-
|
|
15
|
-
|
|
28
|
+
|
|
29
|
+
- Update gemspec links
|
|
30
|
+
- Update views for compatibility with Font Awesome 6
|
|
16
31
|
|
|
17
32
|
v4.9.0 (June 2023)
|
|
18
|
-
|
|
33
|
+
|
|
34
|
+
- Update views for compatibility with Bootstrap 5
|
|
19
35
|
|
|
20
36
|
v4.8.0 (April 2023)
|
|
21
|
-
|
|
37
|
+
|
|
38
|
+
- No changes
|
|
22
39
|
|
|
23
40
|
v4.7.0 (February 2023)
|
|
24
|
-
|
|
41
|
+
|
|
42
|
+
- No changes
|
|
25
43
|
|
|
26
44
|
v4.6.0 (November 2022)
|
|
27
|
-
|
|
45
|
+
|
|
46
|
+
- Show CVSS in Tools menu
|
|
28
47
|
|
|
29
48
|
v4.5.0 (August 2022)
|
|
30
|
-
|
|
49
|
+
|
|
50
|
+
- No changes
|
|
31
51
|
|
|
32
52
|
v4.4.0 (June 2022)
|
|
33
|
-
|
|
53
|
+
|
|
54
|
+
- No changes
|
|
34
55
|
|
|
35
56
|
v4.3.0 (April 2022)
|
|
36
|
-
|
|
57
|
+
|
|
58
|
+
- No changes
|
|
37
59
|
|
|
38
60
|
v4.2.0 (February 2022)
|
|
39
|
-
|
|
61
|
+
|
|
62
|
+
- No changes
|
|
40
63
|
|
|
41
64
|
v4.1.0 (November 2021)
|
|
42
|
-
|
|
43
|
-
|
|
65
|
+
|
|
66
|
+
- Settings: show/hide the calculator in the Issues view
|
|
67
|
+
- Toggle between CVSSv3.0 and CVSSv3.1
|
|
44
68
|
|
|
45
69
|
v4.0.0 (July 2021)
|
|
46
|
-
|
|
70
|
+
|
|
71
|
+
- No changes
|
|
47
72
|
|
|
48
73
|
v3.22.0 (April 2021)
|
|
49
|
-
|
|
74
|
+
|
|
75
|
+
- Update css manifest to use font-awesome assets from vendor files (rather than old gem)
|
|
50
76
|
|
|
51
77
|
v3.21.0 (February 2021)
|
|
52
|
-
|
|
78
|
+
|
|
79
|
+
- Specify exact js and css file name when precompiling assets
|
|
53
80
|
|
|
54
81
|
v3.20.0 (December 2020)
|
|
55
|
-
|
|
82
|
+
|
|
83
|
+
- Use Bootstrap gem vs vendored assets
|
|
56
84
|
|
|
57
85
|
v3.19.0 (September 2020)
|
|
58
|
-
|
|
86
|
+
|
|
87
|
+
- No changes
|
|
59
88
|
|
|
60
89
|
v3.18.0 (July 2020)
|
|
61
|
-
|
|
90
|
+
|
|
91
|
+
- No changes
|
|
62
92
|
|
|
63
93
|
v3.17.0 (May 2020)
|
|
64
|
-
|
|
94
|
+
|
|
95
|
+
- Update REGEX reference for compatibility
|
|
65
96
|
|
|
66
97
|
v3.16.0 (February 2020)
|
|
67
|
-
|
|
98
|
+
|
|
99
|
+
- Update for compatibility with Tylium
|
|
68
100
|
|
|
69
101
|
v3.15.0 (November 2019)
|
|
70
|
-
|
|
102
|
+
|
|
103
|
+
- No changes
|
|
71
104
|
|
|
72
105
|
v3.14.0 (August 2019)
|
|
73
|
-
|
|
106
|
+
|
|
107
|
+
- No changes
|
|
74
108
|
|
|
75
109
|
v3.13.0 (June 2019)
|
|
76
|
-
|
|
110
|
+
|
|
111
|
+
- Allow empty 'CVSSv3.Vector' field to trigger the per-issue calculator.
|
|
77
112
|
|
|
78
113
|
v3.12.0 (March 2019)
|
|
79
|
-
|
|
114
|
+
|
|
115
|
+
- Present a per-issue CVSSv3 calculator
|
|
80
116
|
|
|
81
117
|
v3.11.0 (November 2018)
|
|
82
|
-
|
|
118
|
+
|
|
119
|
+
- No changes
|
|
83
120
|
|
|
84
121
|
v3.10.0 (August 2018)
|
|
85
|
-
|
|
122
|
+
|
|
123
|
+
- Fix vertical button selection behavior
|
|
86
124
|
|
|
87
125
|
v3.9.0 (January 2018)
|
|
88
|
-
|
|
126
|
+
|
|
127
|
+
- Add metric-specific fields to calculator output (v3.8.1)
|
|
89
128
|
|
|
90
129
|
v3.8.0 (September 2017)
|
|
91
|
-
|
|
130
|
+
|
|
131
|
+
- No changes
|
|
92
132
|
|
|
93
133
|
v3.7.0 (July 2017)
|
|
94
|
-
|
|
95
|
-
|
|
134
|
+
|
|
135
|
+
- Add mouseover details to each button
|
|
136
|
+
- Add "High" as an option for Exploit Code Maturity (E)
|
|
96
137
|
|
|
97
138
|
v3.6.0 (March 2017)
|
|
98
|
-
|
|
139
|
+
|
|
140
|
+
- No changes
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
@import 'hera/variables';
|
|
@@ -1 +1,7 @@
|
|
|
1
|
-
|
|
1
|
+
<% if defined?(Dradis::Pro) %>
|
|
2
|
+
<% unless current_user.role?(:contributor) %>
|
|
3
|
+
<li>
|
|
4
|
+
<%= link_to 'Risk Calculators - CVSS', cvss_calculator.calculators_cvss_path, class: 'dropdown-item', data: { turbolinks: false } %>
|
|
5
|
+
</li>
|
|
6
|
+
<% end %>
|
|
7
|
+
<% end %>
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
<div class="d-flex align-items-center justify-content-end gap-2 small">
|
|
2
2
|
<label class="form-label m-0" for="cvss-version">Version:</label>
|
|
3
|
-
<select id="cvss-version" class="form-select" aria-label="cvss version select" data-behavior="cvss-version">
|
|
3
|
+
<select id="cvss-version" class="form-select" aria-label="cvss version select" data-behavior="cvss-version" data-combobox-config="no-combobox">
|
|
4
4
|
<option value="40" <%= 'selected' if @cvss_version == '4.0' %>>v4.0</option>
|
|
5
5
|
<option value="31" <%= 'selected' if @cvss_version == '3.1' %>>v3.1</option>
|
|
6
6
|
<option value="30" <%= 'selected' if @cvss_version == '3.0' %>>v3.0</option>
|
|
@@ -8,7 +8,7 @@
|
|
|
8
8
|
|
|
9
9
|
<%= hidden_field_tag :cr, @cvss3_vector['CR'] %>
|
|
10
10
|
|
|
11
|
-
<div class="btn-group mb-
|
|
11
|
+
<div class="btn-group mb-4">
|
|
12
12
|
<button type="button" class="btn <%= 'active btn-primary' if @cvss3_vector['CR'] == 'X' %>" name="cr" value="X" data-label="Not Defined" data-cvss="CR_X_Label">N/D <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
|
|
13
13
|
|
|
14
14
|
<button type="button" class="btn <%= 'active btn-primary' if @cvss3_vector['CR'] == 'L' %>" name="cr" value="L" data-label="Low" data-cvss="CR_L_Label">Low <i class="fa-regular fa-question-circle" aria-hidden="true"></i></button>
|
|
@@ -4,6 +4,21 @@
|
|
|
4
4
|
<%= render 'issues/sidebar'%>
|
|
5
5
|
<% end %>
|
|
6
6
|
|
|
7
|
+
<ol class="breadcrumb">
|
|
8
|
+
<li class="breadcrumb-item">
|
|
9
|
+
<%= link_to current_project.name, main_app.project_path(current_project) %>
|
|
10
|
+
</li>
|
|
11
|
+
<li class="breadcrumb-item">
|
|
12
|
+
<%= link_to 'All issues', main_app.project_issues_path(current_project) %>
|
|
13
|
+
</li>
|
|
14
|
+
<li class="breadcrumb-item">
|
|
15
|
+
<%= link_to @issue.title? ? @issue.title : "Issue ##{@issue.id}", main_app.project_issue_path(current_project, @issue) %>
|
|
16
|
+
</li>
|
|
17
|
+
<li class="breadcrumb-item active">
|
|
18
|
+
CVSS Risk Scoring
|
|
19
|
+
</li>
|
|
20
|
+
</ol>
|
|
21
|
+
|
|
7
22
|
<div class="content-container">
|
|
8
23
|
<h4 class="header-underline d-flex justify-content-between">
|
|
9
24
|
<span>Edit CVSS Risk Scoring</span>
|
|
@@ -2,9 +2,10 @@
|
|
|
2
2
|
<html>
|
|
3
3
|
<head>
|
|
4
4
|
<title>CVSS Score Calculator | Dradis Framework</title>
|
|
5
|
-
<%= stylesheet_link_tag 'dradis/plugins/calculators/cvss/manifests/application', media: 'all', 'data-
|
|
6
|
-
<%= javascript_include_tag 'dradis/plugins/calculators/cvss/manifests/application', 'data-
|
|
5
|
+
<%= stylesheet_link_tag 'dradis/plugins/calculators/cvss/manifests/application', media: 'all', 'data-turbo-track': 'reload' %>
|
|
6
|
+
<%= javascript_include_tag 'dradis/plugins/calculators/cvss/manifests/application', 'data-turbo-track': 'reload' %>
|
|
7
7
|
<%= csrf_meta_tags %>
|
|
8
|
+
<%= javascript_importmap_tags %>
|
|
8
9
|
|
|
9
10
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
|
10
11
|
</head>
|
|
@@ -14,7 +15,7 @@
|
|
|
14
15
|
<a href="javascript:void(0)" class="navbar-brand">CVSS score calculator</a>
|
|
15
16
|
<ul class="navbar-nav pull-right">
|
|
16
17
|
<li class="nav-item">
|
|
17
|
-
<%= link_to main_app.root_path, class: 'nav-link', data: {
|
|
18
|
+
<%= link_to main_app.root_path, class: 'nav-link', data: { turbo: false } do %>
|
|
18
19
|
Back to the app →
|
|
19
20
|
<% end %>
|
|
20
21
|
</li>
|
|
@@ -10,8 +10,8 @@ module Dradis::Plugins::Calculators::CVSS
|
|
|
10
10
|
app.config.assets.precompile += [
|
|
11
11
|
'dradis/plugins/calculators/cvss/manifests/application.css',
|
|
12
12
|
'dradis/plugins/calculators/cvss/manifests/application.js',
|
|
13
|
-
'dradis/plugins/calculators/cvss/manifests/
|
|
14
|
-
'dradis/plugins/calculators/cvss/manifests/
|
|
13
|
+
'dradis/plugins/calculators/cvss/manifests/hera.js',
|
|
14
|
+
'dradis/plugins/calculators/cvss/manifests/hera.css'
|
|
15
15
|
]
|
|
16
16
|
end
|
|
17
17
|
|
|
@@ -22,17 +22,12 @@ module Dradis::Plugins::Calculators::CVSS
|
|
|
22
22
|
end
|
|
23
23
|
|
|
24
24
|
initializer 'calculator_cvss.mount_engine' do
|
|
25
|
-
# By default, this engine is loaded into the main app. So, upon app
|
|
26
|
-
# initialization, we first check if the DB is loaded and the Configuration
|
|
27
|
-
# table has been created, before checking if the engine is enabled
|
|
28
25
|
Rails.application.reloader.to_prepare do
|
|
29
|
-
|
|
30
|
-
Rails.application.
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
mount Engine => '/', as: :cvss_calculator
|
|
35
|
-
end
|
|
26
|
+
Rails.application.routes.append do
|
|
27
|
+
# Enabling/disabling integrations calls Rails.application.reload_routes! we need the enable
|
|
28
|
+
# check inside the block to ensure the routes can be re-enabled without a server restart
|
|
29
|
+
if Engine.enabled?
|
|
30
|
+
mount Engine => '/', as: :cvss_calculator
|
|
36
31
|
end
|
|
37
32
|
end
|
|
38
33
|
end
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: dradis-calculator_cvss
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 4.
|
|
4
|
+
version: 4.16.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Daniel Martin
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date:
|
|
11
|
+
date: 2025-05-16 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: dradis-plugins
|
|
@@ -70,7 +70,7 @@ files:
|
|
|
70
70
|
- Rakefile
|
|
71
71
|
- app/assets/javascripts/dradis/plugins/calculators/cvss/cvss.js
|
|
72
72
|
- app/assets/javascripts/dradis/plugins/calculators/cvss/manifests/application.js
|
|
73
|
-
- app/assets/javascripts/dradis/plugins/calculators/cvss/manifests/
|
|
73
|
+
- app/assets/javascripts/dradis/plugins/calculators/cvss/manifests/hera.js
|
|
74
74
|
- app/assets/javascripts/dradis/plugins/calculators/cvss/v3/calculator.js.coffee
|
|
75
75
|
- app/assets/javascripts/dradis/plugins/calculators/cvss/v3/vendor/cvsscalc30.js
|
|
76
76
|
- app/assets/javascripts/dradis/plugins/calculators/cvss/v3/vendor/cvsscalc30_helptext.js
|
|
@@ -85,7 +85,7 @@ files:
|
|
|
85
85
|
- app/assets/javascripts/dradis/plugins/calculators/cvss/v4/vendor/max_severity.js
|
|
86
86
|
- app/assets/javascripts/dradis/plugins/calculators/cvss/v4/vendor/metrics.js
|
|
87
87
|
- app/assets/stylesheets/dradis/plugins/calculators/cvss/manifests/application.css.scss
|
|
88
|
-
- app/assets/stylesheets/dradis/plugins/calculators/cvss/manifests/
|
|
88
|
+
- app/assets/stylesheets/dradis/plugins/calculators/cvss/manifests/hera.scss
|
|
89
89
|
- app/controllers/dradis/plugins/calculators/cvss/base_controller.rb
|
|
90
90
|
- app/controllers/dradis/plugins/calculators/cvss/issues_controller.rb
|
|
91
91
|
- app/models/dradis/plugins/calculators/cvss/v3.rb
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
@import 'tylium/variables';
|
/data/app/assets/javascripts/dradis/plugins/calculators/cvss/manifests/{tylium.js → hera.js}
RENAMED
|
File without changes
|