This comment over generalises the problem, but is inherently absurd. There are key indicators in scoring that explain the attack itself which isn't environment

This comment over generalises the problem, but is inherently absurd. There are key indicators in scoring that explain the attack itself which isn't environment specific. I do agree that in most cases the deployment specific configuration affects the ability to be exploited and users or developers should analyse their own configuration.