[wglb]

I've been in security for a while and once received a report of a CVSS score that was egregiously high at Critical.

I modified the assumptions that were made by the reporter and came out with Low.

This is one example of why this is a nonsense metric.

[jsploit]

Any metric is nonsense if used improperly.

[wglb]

I am arguing that there is no proper way to use this.

[refulgentis]

Any ouija board lies with the wrong seance supervisor