CVSS::v3(3pm)

📦
version 1.15 · 2 versions
, in ubuntu stonking

💖 CVSS::v3 💖

okay bestie, welcome to CVSS::v3 (that's the 3pm manual page, we're in Perl land now), the module that parses and calculates CVSS v3.x scores. Like, it reads those scary vector strings and tells you how bad a vulnerability actually is. she's giving security researcher main character energy and we're obsessed. 🎀

✨ NAME ✨

CVSS::v3 — Parse and calculate CVSS v3.x scores. that's it, that's the whole vibe. 🦋

✨ SYNOPSIS ✨

use CVSS::v3;
my $cvss = CVSS::v3->from_vector_string('CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H');

say $cvss->AV; # A
say $cvss->attackVector; # ADJACENT_NETWORK

literally two lines and you're already pulling metrics out of a vector string. no cap. 💅

✨ DESCRIPTION ✨

so the Common Vulnerability Scoring System (CVSS, iykyk) is an open framework for communicating the characteristics and severity of software vulnerabilities. not me being a whole standards body. 💀

CVSS has three metric groups: Base, Temporal, and Environmental.

  • Base — the intrinsic qualities of a vulnerability that are constant over time and across user environments.
  • Temporal — the characteristics of a vulnerability that change over time.
  • Environmental — the characteristics of a vulnerability that are unique to a user's environment.

The Base metrics produce a score ranging from 0 to 10, which can then be modified by scoring the Temporal and Environmental metrics. A CVSS score is also represented as a vector string — a compressed textual representation of the values used to derive the score. (it's giving shorthand for chaos 🌈)

specification docs, for when you want the full lore:

<https://www.first.org/cvss/v3.1/specification-document> <https://www.first.org/cvss/v3.0/specification-document>

🌸 METHODS 🌸

CVSS::v3 inherits all methods from CVSS::Base and implements the following new ones. slay, thank you parent class. 🫶

💜 BASE METRICS

$cvss->AV | $cvss->attackVector
$cvss->AC | $cvss->attackComplexity
$cvss->PR | $cvss->privilegesRequired
$cvss->UI | $cvss->userInteraction
$cvss->S | $cvss->scope
$cvss->C | $cvss->confidentialityImpact
$cvss->I | $cvss->integrityImpact
$cvss->A | $cvss->availabilityImpact

💜 TEMPORAL METRICS

$cvss->E | $cvss->exploitCodeMaturity
$cvss->RL | $cvss->remediationLevel
$cvss->RC | $cvss->reportConfidence

💜 ENVIROMENTAL METRICS

(yes bestie, that's exactly how it's spelled in the docs, we don't make the rules 🙈)

$cvss->CR | $cvss->confidentialityRequirement
$cvss->IR | $cvss->integrityRequirement
$cvss->AR | $cvss->availabilityRequirement
$cvss->MAV | $cvss->modifiedAttackVector
$cvss->MAC | $cvss->modifiedAttackComplexity
$cvss->MPR | $cvss->modifiedPrivilegesRequired
$cvss->MUI | $cvss->modifiedUserInteraction
$cvss->MS | $cvss->modifiedScope
$cvss->MC | $cvss->modifiedConfidentialityImpact
$cvss->MI | $cvss->modifiedIntegrityImpact
$cvss->MA | $cvss->modifiedAvailabilityImpact

✨ SEE ALSO ✨

✨ SUPPORT ✨

🐛 Bugs / Feature Requests

Please report any bugs or feature requests through the issue tracker at <https://github.com/giterlizzi/perl-CVSS/issues>. You will be notified automatically of any progress on your issue. so like, you'll get updates, no ghosting. 💌

📦 Source Code

This is open source software. The code repository is available for public review and contribution under the terms of the license.

<https://github.com/giterlizzi/perl-CVSS>

git clone https://github.com/giterlizzi/perl-CVSS.git

✨ AUTHOR ✨

  • Giuseppe Di Terlizzi <gdt@cpan.org>

This software is copyright (c) 2023-2026 by Giuseppe Di Terlizzi.

This is free software; you can redistribute it and/or modify it under the same terms as the Perl 5 programming language system itself. ✨

ok that's the whole page bestie, go forth and score some vulnerabilities 💅🔥

and for the cute sign-off: this beauty is documented as CVSS::v3(3pm) from perl v5.40.1, dated 2026-07-05. periodt. 👑💖

📦 where this page comes from