Use nvdtools cvss3.BaseScore instead of just cvss3.Score (#336)

pkg/types/types.go

@@ -129,7 +129,7 @@ func ConvertCVSSv2(cvss2Vector string) (*MetadataCVSSv2, error) {
 		return nil, err
 	}
 	var m MetadataCVSSv2
-	m.Score = v.Score()
+	m.Score = v.BaseScore()
 	m.Vectors = cvss2Vector
 	m.ExploitabilityScore = roundTo1Decimal(v.ExploitabilityScore())
 	m.ImpactScore = roundTo1Decimal(v.ImpactScore(false))
@@ -147,7 +147,7 @@ func ConvertCVSSv3(cvss3Vector string) (*MetadataCVSSv3, error) {
 	}
 
 	var m MetadataCVSSv3
-	m.Score = v.Score()
+	m.Score = v.BaseScore()
 	m.Vectors = cvss3Vector
 	m.ExploitabilityScore = roundTo1Decimal(v.ExploitabilityScore())
 	m.ImpactScore = roundTo1Decimal(v.ImpactScore())

pkg/types/types_test.go

@@ -0,0 +1,21 @@
+package types
+
+import (
+	"testing"
+
+	"github.com/stretchr/testify/assert"
+)
+
+func TestConvertCVSSv3(t *testing.T) {
+	cvss3, err := ConvertCVSSv3("CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H")
+	assert.NoError(t, err)
+	assert.Equal(t, 8.3, cvss3.Score)
+	assert.Equal(t, 6.0, cvss3.ImpactScore)
+	assert.Equal(t, 1.6, cvss3.ExploitabilityScore)
+
+	cvss3, err = ConvertCVSSv3("CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H")
+	assert.NoError(t, err)
+	assert.Equal(t, 7.5, cvss3.Score)
+	assert.Equal(t, 6.0, cvss3.ImpactScore)
+	assert.Equal(t, 0.8, cvss3.ExploitabilityScore)
+}