@matrix9180 @nil @pixelfed that's how it was scored...

@matrix9180 @nil @pixelfed that's how it was scored by GitHub score calculator. https://github.com/pixelfed/pixelfed/security/advisories/GHSA-gccq-h3xj-jgvf

Like 13 February at 8:09 | Open on hachyderm.io

3 comments

Anil

@thisismissem @matrix9180 @pixelfed huh. TIL what's in the CVE score: https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator

At least the base score.

13 February at 8:20 | Open on fosstodon.org

Matrix9180 :ruby: :rust:

@nil @thisismissem @pixelfed yep, but I suppose it could be that high because it maybe exposes everyone's info. Going to get some rest but I'll probably see what they fixed and go from there lol

13 February at 8:21 | Open on hachyderm.io

Emelia 👸🏻

@nil @matrix9180 @pixelfed so yeah, base score is 9.9 — though nist's calculator is more explanatory than GitHubs, overall score ended up being 8.4 with all the other factors

13 February at 8:38 | Open on hachyderm.io

Go Up