EN

EGAD!

Secur0's public reasoning on CVSS 4.0 scoring. One leaf per vulnerability class: the vector, the per-metric reasoning, and where the line sits.

6 articles

  1. What is EGAD!Secur0's public reasoning on CVSS 4.0 scoring: what EGAD! is, what a leaf contains, and how to challenge one.
  2. Contributing to EGAD!General guidelines: where to find the GitHub repository, what we expect from you, and what you can expect from us.
  3. Scoring Insecure Direct Object ReferencesCVSS4.0 interpretation applied to IDOR vulnerabilities in web applications.
  4. Scoring Cross-Site ScriptingCVSS4.0 interpretation applied to XSS vulnerabilities in web applications.
  5. Scoring HTML InjectionCVSS4.0 interpretation applied to HTMLi vulnerabilities in web applications.
  6. Scoring Information DisclosureCVSS4.0 interpretation applied to Information Disclosure vulnerabilities in web applications.

Other collections