Risk Triage with CVSS + Business Impact
devsecops · easy · +35 XP
Target
GET /api/lab/risk-triage-101/findings (5 findings + business context)
POST /api/lab/risk-triage-101/submit body {p0_finding_id}
Goal: the right priority-0 is not simply highest CVSS — it's highest CVSS × business-impact (prod-facing + auth-bypass beats internal-only RCE). Pick the finding-id that wins.
// AI hint · first is free · then 1 credit or 5 XP
// attack console
/api/lab/risk-triage-101/
// reuse on the cli
// submit flag
// no solves yet