OWASP Top Ten 2021 Category A08:2021 - Software and Data Integrity Failures

Opis

Weaknesses in this category are related to the A08 category "Software and Data Integrity Failures" in the OWASP Top Ten 2021.

Wpisy w tej grupie

• CWE-345 Insufficient Verification of Data Authenticity
• CWE-353 Missing Support for Integrity Check
• CWE-426 Untrusted Search Path
• CWE-494 Download of Code Without Integrity Check
• CWE-502 Deserialization of Untrusted Data
• CWE-565 Reliance on Cookies without Validation and Integrity Checking
• CWE-784 Reliance on Cookies without Validation and Integrity Checking in a Security Decision
• CWE-829 Inclusion of Functionality from Untrusted Control Sphere
• CWE-830 Inclusion of Web Functionality from an Untrusted Source
• CWE-915 Improperly Controlled Modification of Dynamically-Determined Object Attributes

Uwagi

As of CWE 4.6, the relationships in this category were pulled directly from the CWE mappings cited in the 2021 OWASP Top Ten. The CWE Program will work with OWASP to improve these mappings, possibly requiring modifications to CWE itself.

Źródła