Weaknesses in OWASP Top Ten (2021)

Opis

CWE entries in this view (graph) are associated with the OWASP Top Ten, as released in 2021.

Wpisy w tej grupie

• CWE-1345 OWASP Top Ten 2021 Category A01:2021 - Broken Access Control
• CWE-1346 OWASP Top Ten 2021 Category A02:2021 - Cryptographic Failures
• CWE-1347 OWASP Top Ten 2021 Category A03:2021 - Injection
• CWE-1348 OWASP Top Ten 2021 Category A04:2021 - Insecure Design
• CWE-1349 OWASP Top Ten 2021 Category A05:2021 - Security Misconfiguration
• CWE-1352 OWASP Top Ten 2021 Category A06:2021 - Vulnerable and Outdated Components
• CWE-1353 OWASP Top Ten 2021 Category A07:2021 - Identification and Authentication Failures
• CWE-1354 OWASP Top Ten 2021 Category A08:2021 - Software and Data Integrity Failures
• CWE-1355 OWASP Top Ten 2021 Category A09:2021 - Security Logging and Monitoring Failures
• CWE-1356 OWASP Top Ten 2021 Category A10:2021 - Server-Side Request Forgery (SSRF)

Uwagi

As of CWE 4.6, the relationships in this view were pulled directly from the CWE mappings cited in the 2021 OWASP Top Ten. These mappings include categories and high-level weaknesses. One mapping to a deprecated entry was removed. The CWE Program will work with OWASP to improve these mappings, possibly requiring modifications to CWE itself.

Źródła