CWE-858 · Kategoria
The CERT Oracle Secure Coding Standard for Java (2011) Chapter 15 - Serialization (SER)
- Status
- Przestarzały
- Dodano
- 24 maja 2011
- Ostatnia zmiana
- 29 czerwca 2023
Opis
Weaknesses in this category are related to rules in the Serialization (SER) chapter of The CERT Oracle Secure Coding Standard for Java (2011).
Wpisy w tej grupie
- CWE-250 Execution with Unnecessary Privileges
- CWE-319 Cleartext Transmission of Sensitive Information
- CWE-400 Uncontrolled Resource Consumption
- CWE-499 Serializable Class Containing Sensitive Data
- CWE-502 Deserialization of Untrusted Data
- CWE-589 Call to Non-ubiquitous API
- CWE-770 Allocation of Resources Without Limits or Throttling
Źródła
Wpis z katalogu CWE 4.20.