feat(cve/nvd): support CVSS v4.0

[MaineK00n]

If this Pull Request is work in progress, Add a prefix of “[WIP]” in the title.

What did you implement:

CVSS V4.0 Schema has been added to the NVD of go-cve-dictionary by the following PR.
vulsio/go-cve-dictionary#393

Vuls supports NVD CVSS v4.0.

Type of change

• New feature (non-breaking change which adds functionality)

How Has This Been Tested?

• config.toml

[servers]
[servers.pseudo]
type = "pseudo"
cpeNames = [
"cpe:2.3:a:clashforwindows:clash:0.1.0:*:*:*:*:windows:*:*"
]

before

$ go-cve-dictionary fetch mitre 2024
$ go-cve-dictionary fetch nvd 2024

$ vuls scan
$ vuls report
$ cat results/2024-06-27T22-16-01+0900/pseudo.json | jq '.scannedCves[].cveContents[][] | {type: .type, cveID: .cveID, cvssv40Vector: .cvss40Vector, optional: .optional}'
{
  "type": "mitre",
  "cveID": "CVE-2024-5732",
  "cvssv40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
  "optional": {
    "source": "CNA:VulDB"
  }
}
{
  "type": "mitre",
  "cveID": "CVE-2024-5732",
  "cvssv40Vector": "",
  "optional": {
    "source": "ADP:CISA-ADP"
  }
}
{
  "type": "nvd",
  "cveID": "CVE-2024-5732",
  "cvssv40Vector": "",
  "optional": {
    "source": "cna@vuldb.com"
  }
}
{
  "type": "nvd",
  "cveID": "CVE-2024-5732",
  "cvssv40Vector": "",
  "optional": {
    "source": "nvd@nist.gov"
  }
}

after

$ go-cve-dictionary fetch mitre 2024
$ go-cve-dictionary fetch nvd 2024

$ vuls scan
$ vuls report
$ cat results/2024-06-27T22-16-01+0900/pseudo.json | jq '.scannedCves[].cveContents[][] | {type: .type, cveID: .cveID, cvssv40Vector: .cvss40Vector, optional: .optional}'
cat results/2024-07-03T14-58-36+0900/pseudo.json | jq '.scannedCves[].cveContents[][] | {type: .type, cveID: .cveID, cvssv40Vector: .cvss40Vector, optional: .optional}'
{
  "type": "mitre",
  "cveID": "CVE-2024-5732",
  "cvssv40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
  "optional": {
    "source": "CNA:VulDB"
  }
}
{
  "type": "mitre",
  "cveID": "CVE-2024-5732",
  "cvssv40Vector": "",
  "optional": {
    "source": "ADP:CISA-ADP"
  }
}
{
  "type": "nvd",
  "cveID": "CVE-2024-5732",
  "cvssv40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
  "optional": {
    "source": "cna@vuldb.com"
  }
}
{
  "type": "nvd",
  "cveID": "CVE-2024-5732",
  "cvssv40Vector": "",
  "optional": {
    "source": "nvd@nist.gov"
  }
}

Checklist:

You don't have to satisfy all of the following.

• Write tests
• Write documentation
• Check that there aren't other open pull requests for the same issue/feature
• Format your source code by make fmt
• Pass the test by make test
• Provide verification config / commands
• Enable "Allow edits from maintainers" for this PR
• Update the messages below

Is this ready for review?: YES

Reference

[shino]

🍻