←back to thread

Max severity RCE flaw discovered in widely used Apache Parquet

(www.bleepingcomputer.com)
174 points andy99 | 1 comments | 06 Apr 25 17:21 UTC | HN request time: 1.617s | source
Show context
tptacek ◴[06 Apr 25 19:56 UTC] No.43604427[source]▶
Broken record, but "has a CVSS score of 10.0" is literally meaningless. In fact, over the last couple years, I've come to take vulnerabilities with very high CVSS scores less seriously. Remember, Heartbleed was a "7.5".
replies(5): >>43604810 #>>43605410 #>>43606314 #>>43609363 #>>43610358 #
1. marcolussetti ◴[06 Apr 25 20:43 UTC] No.43604810[source]▶
That's mostly due to the switch from CVSS 2 to CVSS 3