CWE-813 · Kategoria
OWASP Top Ten 2010 Category A4 - Insecure Direct Object References
- Status
- Przestarzały
- Dodano
- 17 czerwca 2010
- Ostatnia zmiana
- 9 września 2025
Opis
Weaknesses in this category are related to the A4 category in the OWASP Top Ten 2010.
Wpisy w tej grupie
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
- CWE-434 Unrestricted Upload of File with Dangerous Type
- CWE-639 Authorization Bypass Through User-Controlled Key
- CWE-829 Inclusion of Functionality from Untrusted Control Sphere
- CWE-862 Missing Authorization
- CWE-863 Incorrect Authorization
- CWE-99 Improper Control of Resource Identifiers ('Resource Injection')
Źródła
Wpis z katalogu CWE 4.20.