OWASP Top Ten 2025 Category A03:2025 - Software Supply Chain Failures

Opis

Weaknesses in this category are related to the A03 category "Software Supply Chain Failures" in the OWASP Top Ten 2025.

Wpisy w tej grupie

• CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
• CWE-1104 Use of Unmaintained Third Party Components
• CWE-1329 Reliance on Component That is Not Updateable
• CWE-1395 Dependency on Vulnerable Third-Party Component
• CWE-447 Unimplemented or Unsupported Feature in UI
• CWE-477 Use of Obsolete Function

Uwagi

As of CWE 4.19, the relationships in this category were pulled directly from the CWE mappings cited in the 2025 OWASP Top Ten. These mappings include categories, which are discouraged for mapping, as well as high-level weaknesses such as Pillars. The CWE Program will work with OWASP to improve these mappings, possibly requiring modifications to CWE itself.

Źródła