Represent the CVSS model correctly in the database #330

New issue

Open

opened 2024-11-11 09:37:40 +00:00 by fricklerhandwerk · 1 comment

fricklerhandwerk commented

2024-11-11 09:37:40 +00:00

(Migrated from github.com)

Currently things like "user interaction" is using the "severity" enum, but it should be "required/not required". There are more things like that.

fricklerhandwerk commented

2024-11-18 20:58:55 +00:00

(Migrated from github.com)

In [52]: Metric.objects.filter(raw_cvss_json__userInteraction__isnull=False).count()
Out[52]: 2042853

In [53]: Metric.objects.filter(raw_cvss_json__userInteraction__isnull=True).count()
Out[53]: 3688572

In [56]: Metric.objects.filter(raw_cvss_json__vectorString__isnull=False).count()
Out[56]: 3018816

We have 5.7M total entries, 2M of which have parsed a CVSS vectorString. 3M of them have a vectorString. Doing our own parsing would give us 1M more entries with parsed CVSS data.

``` In [52]: Metric.objects.filter(raw_cvss_json__userInteraction__isnull=False).count() Out[52]: 2042853 In [53]: Metric.objects.filter(raw_cvss_json__userInteraction__isnull=True).count() Out[53]: 3688572 In [56]: Metric.objects.filter(raw_cvss_json__vectorString__isnull=False).count() Out[56]: 3018816 ``` We have 5.7M total entries, 2M of which have parsed a CVSS vectorString. 3M of them have a vectorString. Doing our own parsing would give us 1M more entries with parsed CVSS data.