Weaknesses in OWASP Top Ten (2013)

Opis

CWE nodes in this view (graph) are associated with the OWASP Top Ten, as released in 2013. This view is considered obsolete as a newer version of the OWASP Top Ten is available.

Wpisy w tej grupie

• CWE-929 OWASP Top Ten 2013 Category A1 - Injection
• CWE-930 OWASP Top Ten 2013 Category A2 - Broken Authentication and Session Management
• CWE-931 OWASP Top Ten 2013 Category A3 - Cross-Site Scripting (XSS)
• CWE-932 OWASP Top Ten 2013 Category A4 - Insecure Direct Object References
• CWE-933 OWASP Top Ten 2013 Category A5 - Security Misconfiguration
• CWE-934 OWASP Top Ten 2013 Category A6 - Sensitive Data Exposure
• CWE-935 OWASP Top Ten 2013 Category A7 - Missing Function Level Access Control
• CWE-936 OWASP Top Ten 2013 Category A8 - Cross-Site Request Forgery (CSRF)
• CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
• CWE-938 OWASP Top Ten 2013 Category A10 - Unvalidated Redirects and Forwards

Uwagi

The relationships in this view have been pulled directly from the 2013 OWASP Top 10 document, either from the explicit mapping section, or from weakness types alluded to in the written sections.

Źródła