Detail Tampilan CWE-1468

CWE-1468

Weaknesses Addressed by the OWASP Golang Secure Coding Practices Guide
2026-10-23 +00:00
Incomplete
Explicit
CWE Mitre.org
Notifikasi untuk CWE tertentu
Tetap terinformasi tentang perubahan untuk CWE tertentu.
Kelola notifikasi

Nama: Weaknesses Addressed by the OWASP Golang Secure Coding Practices Guide

CWE entries in this view (slice) are fully or partially eliminated by following the guidance presented in the OWASP Golang Secure Coding Practices Guide.

Anggota CWE

CWE-116: Improper Encoding or Escaping of Output Dasar

CWE-125: Out-of-bounds Read Dasar

CWE-1333: Inefficient Regular Expression Complexity Dasar

CWE-1385: Missing Origin Validation in WebSockets Dasar

CWE-1390: Weak Authentication Dasar

CWE-1393: Use of Default Password Dasar

CWE-204: Observable Response Discrepancy Dasar

CWE-209: Generation of Error Message Containing Sensitive Information Dasar

CWE-20: Improper Input Validation Dasar

CWE-22: Improper Limitation of a Pathname to a Restricted Directory Dasar

CWE-295: Improper Certificate Validation Dasar

CWE-306: Missing Authentication for Critical Functionality Dasar

CWE-307: Improper Restriction of Excessive Authentication Attempts Dasar

CWE-309: Use of Password System for Primary Authentication Dasar

CWE-311: Missing Encryption of Sensitive Data Dasar

CWE-312: Cleartext Storage of Sensitive Information Dasar

CWE-319: Cleartext Transmission of Sensitive Information Dasar

CWE-321: Use of Hard-coded Cryptographic Key Dasar

CWE-328: Use of Weak Hash Dasar

CWE-330: Use of Insufficiently Random Values Dasar

CWE-352: Cross-Site Request Forgery Dasar

CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere Dasar

CWE-532: Insertion of Sensitive Information into Log File Dasar

CWE-79: Improper Neutralization of Input During Web Page Generation Dasar

CWE-862: Missing Authorization Dasar

CWE-863: Incorrect Authorization Dasar

CWE-89: Improper Neutralization of Special Elements used in an SQL Command Dasar

Informasi Tampilan CWE

Catatan Pemetaan Kerentanan

Justifikasi : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
Komentar : Use this View or other Views to search and navigate for the appropriate weakness.

Catatan

The relationships in this view were determined based on specific statements within the rules from the guide. Not all rules have direct relationships to individual weaknesses, although they likely have chaining relationships in specific circumstances.
The CWE mappings within this guide are not complete. Some suggestions might not have clearly related weanesses, or there may be some CWE gaps.

Audiens

Pemangku kepentingan Deskripsi
Software Developers By following this coding guide, Go developers will be able to fully or partially prevent the weaknesses that are identified in this view. In addition, developers can use a CWE coverage graph to determine which weaknesses are not directly addressed by the guide, which will help identify and resolve remaining gaps in training, tool acquisition, or other approaches for reducing weaknesses.
Product Customers If a software developer claims to be following this coding guide, then customers can search for the weaknesses in this view in order to formulate independent evidence of that claim.
Educators Educators can use this view in multiple ways. For example, if there is a focus on teaching weaknesses, the educator could link them to this relevant Secure Coding Guide.

Pengajuan

Nama Organisasi Tanggal Tanggal rilis Version
CWE Content Team MITRE 2026-10-23 +00:00 2026-10-28 +00:00 5.0

Referensi

REF-1566

Golang Secure Coding Practices guide
OWASP.
https://github.com/OWASP/Go-SCP

Informasi yang disajikan di CVE Find berasal dari beberapa sumber referensi yang dipilih dengan cermat. Data CVE disediakan oleh MITRE Corporation dan National Vulnerability Database (NVD). Katalog Known Exploited Vulnerabilities (KEV) bersumber dari Cybersecurity and Infrastructure Security Agency (CISA), sementara skor EPSS berasal dari FIRST.org. Selain itu, data mengenai kelemahan perangkat lunak (CWE) dan pola serangan umum (CAPEC) dikelola oleh MITRE Corporation, dan informasi tentang konfigurasi perangkat keras dan perangkat lunak (CPE) disediakan oleh NVD.