Merge pull request #239 from nscuro/fix-vulnerability-details-without…

…-cvss-scores Calculate CVSS scores dynamically when only the vector is known
DependencyTrack · Sep 4, 2022 · 9ea7384 · 9ea7384
2 parents 59829ca + 29a1cac
commit 9ea7384
Showing 1 changed file with 18 additions and 6 deletions.
diff --git a/src/views/portfolio/vulnerabilities/VulnerabilityDetailsModal.vue b/src/views/portfolio/vulnerabilities/VulnerabilityDetailsModal.vue
@@ -618,9 +618,15 @@ export default {
         this.cvssv2Vector.c = vector.C;
         this.cvssv2Vector.i = vector.I;
         this.cvssv2Vector.a = vector.A;
-        this.cvssV2Score.baseScore = this.vulnerability.cvssV2BaseScore;
-        this.cvssV2Score.impactSubScore = this.vulnerability.cvssV2ImpactSubScore;
-        this.cvssV2Score.exploitabilitySubScore = this.vulnerability.cvssV2ExploitabilitySubScore;
+        if (this.vulnerability.cvssV2BaseScore
+          && this.vulnerability.cvssV2ImpactSubScore
+          && this.vulnerability.cvssV2ExploitabilitySubScore) {
+          this.cvssV2Score.baseScore = this.vulnerability.cvssV2BaseScore;
+          this.cvssV2Score.impactSubScore = this.vulnerability.cvssV2ImpactSubScore;
+          this.cvssV2Score.exploitabilitySubScore = this.vulnerability.cvssV2ExploitabilitySubScore;
+        } else {
+          this.retrieveCvssScore(this.vulnerability.cvssV2Vector, 2);
+        }
       }
       return vector;
     },
@@ -639,9 +645,15 @@ export default {
         this.cvssv3Vector.c = vector.C;
         this.cvssv3Vector.i = vector.I;
         this.cvssv3Vector.a = vector.A;
-        this.cvssV3Score.baseScore = this.vulnerability.cvssV3BaseScore;
-        this.cvssV3Score.impactSubScore = this.vulnerability.cvssV3ImpactSubScore;
-        this.cvssV3Score.exploitabilitySubScore = this.vulnerability.cvssV3ExploitabilitySubScore;
+        if (this.vulnerability.cvssV3BaseScore
+          && this.vulnerability.cvssV3ImpactSubScore
+          && this.vulnerability.cvssV3ExploitabilitySubScore) {
+          this.cvssV3Score.baseScore = this.vulnerability.cvssV3BaseScore;
+          this.cvssV3Score.impactSubScore = this.vulnerability.cvssV3ImpactSubScore;
+          this.cvssV3Score.exploitabilitySubScore = this.vulnerability.cvssV3ExploitabilitySubScore;
+        } else {
+          this.retrieveCvssScore(this.vulnerability.cvssV3Vector, 3);
+        }
       }
       return vector;
     },