PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Major Updates to Vulnerability Rating Taxonomy

bugcrowd.com | vulnerability | #product-update | #bugcrowd | #vrt | #taxonomy | #vulnerability-rating-taxonomy | #priority
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bugcrowd ships VRT 1.0 with technology-agnostic categories spanning web, IoT and automotive, context-based prioritization for IDOR, and TRACE-based XSS lowered to P5.
Published
Collected

Related coverage

vulnerability · bugcrowd.com
Bugcrowd Releases Vulnerability Rating Taxonomy 1.9 with More Classifications for Credential Exposure
Bugcrowd releases VRT 1.9, adding granular Disclosure of Secrets ratings for credential exposure (P5-P1) and new SSTI, Broken Link Hijacking, Password Policy Bypass, and Flash-based CSRF entries.
vulnerability · bugcrowd.com
Bugcrowd Releases Vulnerability Rating Taxonomy 1.8 With New Indicators of Compromise
Bugcrowd releases VRT 1.8, adding race condition and cache poisoning entries, a new Indicators of Compromise category, and downgrading mobile clipboard findings to P5.
vulnerability · bugcrowd.com
Bugcrowd’s VRT 1.5 Offers a Taxonomy Reflective of the Current AppSec Landscape
Bugcrowd ships VRT 1.5 of its open-source Vulnerability Rating Taxonomy, adding entries for common issues and finer severity granularity, and reassessing Flash-related vulnerability risk.
vulnerability · bugcrowd.com
Bugcrowd’s Vulnerability Rating Taxonomy Goes Open Source
Bugcrowd open sources its Vulnerability Rating Taxonomy (VRT) on GitHub, inviting community input on priority ratings, and ships VRT 1.1 with revisions to server misconfigurations, XSS and CSRF.
blog · bugcrowd.com
Frequently asked questions about automated pentesting
Bugcrowd Q&A on automated pentesting: the speed and coverage benefits, false-negative limits, why hybrid human+AI testing wins, and its Savant Pathseeker agentic offering.
blog · bugcrowd.com
Introducing Savant Pathseeker: Agentic pentesting for preemptive security
Bugcrowd launches Savant Pathseeker, an autonomous agentic pentesting solution that tests web apps and APIs at machine speed and validates exploitability for preemptive security.
Back