Untitled attachment
https://cyberplace.social/system/media_attachments/files/114/104/652/793/881/812/original/a67dbde655b57553.png
VMware have set the Attack Vector to Local, which brings down the CVSS score - but you don't need to be locally at a VM to do the attack, you can do it over the internet if you have access to any VM.
If you change it to Network, you get 10
GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.
All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.