## Contents

- 4. Interpreting Reports
- Severity Levels
- Reading a Finding

## 4. Interpreting Reports

### Severity Levels

| Severity | Definition | Action |
|----------|-----------|--------|
| **Critical** | Direct data breach, RCE, full authentication bypass | Fix immediately, consider taking app offline |
| **High** | Significant data exposure, privilege escalation, stored XSS | Fix within 24-48 hours |
| **Medium** | Limited data exposure, CSRF, reflected XSS, information disclosure | Fix within 1-2 weeks |
| **Low** | Minor information leaks, missing headers, verbose errors | Fix in next sprint |

### Reading a Finding

Each finding in the report includes:

```markdown