3 ms·

what is CVSS/severity of this? Critical? 9+?

• tedunangst 3y ago
  CVSS with rice: 10/10
  • slt2021 3y ago
    do you have a source for this by any chance? or screenshot? thank you
    • wiml 3y ago
      He's just making a reference to an old reddit joke, I don't think it's a CVSS 10
• tptacek 3y ago
  CVSS is meaningless, literally a Ouija board that reflects the intuition of whoever's computing the score. A more reasonable way to look at severity is on a two dimensional scale of lo-hi severity and lo-hi situationality. This is a high-severity, moderately situational bug (it would be highly situational if it required user interaction, and not situational at all if it didn't require control over the remote SSH server).
• NoZebra120vClip 3y ago
  CVSS are bunk. https://portswigger.net/daily-swig/cvss-system-criticized-for-failure-to-address-real-world-impact https://portswigger.net/daily-swig/cvss-system-criticized-fo...