Add test cases for empty metric value

Author: 0llirocks

spec/cvss2/cvss2_spec.rb

@@ -33,6 +33,7 @@
   end
   let(:invalid_cvss2_extra_slash) { CvssSuite.new('AV:N//AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C') }
   let(:invalid_cvss2_wrong_value) { CvssSuite.new('AV:N/AC:L/Au:N/C:P/I:P/A:P/E:R/RL:OF/RC:C') }
+  let(:invalid_cvss2_empty_value) { CvssSuite.new('AV:N/AC:L/Au:N/C:P/I:P/A:P/E:/RL:OF/RC:C') }
 
   describe 'valid cvss2' do
     subject { valid_cvss2 }
@@ -136,6 +137,12 @@
     it_behaves_like 'a invalid cvss vector with version', 2
   end
 
+  describe 'invalid cvss2 with empty value for Exploit Code Maturity (E)' do
+    subject { invalid_cvss2_empty_value }
+
+    it_behaves_like 'a invalid cvss vector with version', 2
+  end
+
   # Severity tests https://nvd.nist.gov/vuln-metrics/cvss
   # v2 Severity High: 7.0 - 10.0
   describe 'valid cvss2_severity_high' do

spec/cvss3/cvss3_spec.rb

@@ -48,6 +48,7 @@
   end
   let(:invalid_cvss3_extra_slash) { CvssSuite.new('CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N//I:N/A:H/E:P/RL:U/RC:C/') }
   let(:invalid_cvss3_wrong_value) { CvssSuite.new('CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:R/RL:U/RC:C') }
+  let(:invalid_cvss3_empty_value) { CvssSuite.new('CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:/RL:U/RC:C') }
 
   describe 'valid cvss3' do
     subject { valid_cvss3 }
@@ -187,6 +188,12 @@
     it_behaves_like 'a invalid cvss vector with version', 3.0
   end
 
+  describe 'invalid cvss3 with empty value for Exploit Code Maturity (E)' do
+    subject { invalid_cvss3_empty_value }
+
+    it_behaves_like 'a invalid cvss vector with version', 3.0
+  end
+
   describe 'correct vector' do
     [
       ['CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L', 'CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L'],

spec/cvss31/cvss31_spec.rb

@@ -47,6 +47,7 @@
   end
   let(:invalid_cvss31_extra_slash) { CvssSuite.new('CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N//I:N/A:H/E:P/RL:U/RC:C/') }
   let(:invalid_cvss31_wrong_value) { CvssSuite.new('CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:R/RL:U/RC:C') }
+  let(:invalid_cvss31_empty_value) { CvssSuite.new('CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:/RL:U/RC:C') }
 
   describe 'valid cvss31' do
     subject { valid_cvss31 }
@@ -186,6 +187,12 @@
     it_behaves_like 'a invalid cvss vector with version', 3.1
   end
 
+  describe 'invalid cvss31 with wrong value for Exploit Code Maturity (E)' do
+    subject { invalid_cvss31_empty_value }
+
+    it_behaves_like 'a invalid cvss vector with version', 3.1
+  end
+
   describe 'correct vector' do
     [
       ['CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L', 'CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L'],