vulnerability-rating-taxonomy | baseline priority ratings for common security

vulnerability-rating-taxonomy is a Python library. vulnerability-rating-taxonomy has no bugs, it has no vulnerabilities, it has a Permissive License and it has low support. However vulnerability-rating-taxonomy build file is not available. You can download it from GitHub.

Bugcrowd's VRT outlines Bugcrowd's baseline technical severity rating – taking into account potential differences among edge cases – for common vulnerability classes. To arrive at this baseline technical severity rating for a given vulnerability, Bugcrowd's application security engineers started with the generally-accepted industry guideline and further considered the vulnerability's average acceptance rate, average priority, and frequency on business use case specific exclusions lists across all of Bugcrowd's programs. It is important to remember that while the recommended priority, from P1 to P5 might apply without context, it’s possible that application complexity, bounty brief restrictions or unusual impact could result in a different rating. Bugcrowd welcomes community feedback and direct contributions to the Bugcrowd VRT. We accept comments for public discussion via GitHub Issues, but can also accommodate comments made via email to vrt@bugcrowd.com. For more details see CONTRIBUTING.