CWE-1411 · Kategoria
Comprehensive Categorization: Insufficient Verification of Data Authenticity
- Status
- Niekompletny
- Dodano
- 25 kwietnia 2023
- Ostatnia zmiana
- 29 czerwca 2023
Opis
Weaknesses in this category are related to insufficient verification of data authenticity.
Wpisy w tej grupie
- CWE-345 Insufficient Verification of Data Authenticity
- CWE-346 Origin Validation Error
- CWE-348 Use of Less Trusted Source
- CWE-349 Acceptance of Extraneous Untrusted Data With Trusted Data
- CWE-351 Insufficient Type Distinction
- CWE-352 Cross-Site Request Forgery (CSRF)
- CWE-353 Missing Support for Integrity Check
- CWE-354 Improper Validation of Integrity Check Value
- CWE-360 Trust of System Event Data
- CWE-494 Download of Code Without Integrity Check
- CWE-616 Incomplete Identification of Uploaded File Variables (PHP)
- CWE-646 Reliance on File Name or Extension of Externally-Supplied File
- CWE-649 Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking
- CWE-924 Improper Enforcement of Message Integrity During Transmission in a Communication Channel
- CWE-1293 Missing Source Correlation of Multiple Independent Data
- CWE-1385 Missing Origin Validation in WebSockets
Źródła
Wpis z katalogu CWE 4.20.