Openvas CSV Parser - Severity management

[ptitkosmos]

Is your feature request related to a problem? Please describe Openvas does not make difference between High and Critical vulnerabilities. So even vulnerability above 9 is tagged as High. In Openvas XML parser, it seems it have been a mapping done previously to deal with such case.

Describe the solution you'd like Now there is the cvss score in csv parser, it would be nice to map the severity regarding the value if available. Ensure same is done on xml parser.

Describe alternatives you've considered As I build the csv myself, I implemented the mapping on my side.

Additional context Code in xml parser

[valentijnscholten]

I don't understand your report.Both the XML and CSV parser use the literal value provided in the uploaded report (severity column or threat field). Are you requesting the the parsers uses a value based on the CVSS score instead?

[manuel-sommer]

Could you give us an update on this @ptitkosmos ?

[ptitkosmos]

Hello, yes i want the parser to rewrite the severity related to the cvss score if available in the report. Because Openvas sets severity to High for cvss from 7 to 10 included. Openvas doesn't use the "critical" severity at all. So the severity is wrong in DefectDojo.