3 ms·
It doesn't help that people rated a CVE 9.something for a PHP vuln in a barely used method of an extension that can be exploited if you use .. I forgot .. ah ye
by amne 2y ago
It doesn't help that people rated a CVE 9.something for a PHP vuln in a barely used method of an extension that can be exploited if you use .. I forgot .. ah yes .. IIS.
Peter says wolf too many times?
Maybe a CVE should have a complex score (severity / spread): 9.9 / 4.
severity 9.9 : easy to exploit if you run this .. you're cooked
spread 4 : you most likely are not running this or it's by default in a way that you're not cooked
- yread 2y agoIndeed, CVSSs don't take into account how widespread the software is. You know it. Why are you surprised it got 9.9? It seems the cve shows how to completely pwn cups so it has a high one. I don't run pg but I'm not going to be moaning about the recent vulnerability in pgadmin being 9.9 "ugh why so high? I don't use it!"