CWE-1026
Weaknesses in OWASP Top Ten (2017)
2018-01-22 +00:00
Thông báo cho một CWE
Luôn được thông báo về mọi thay đổi đối với một CWE cụ thể.
Tên: Weaknesses in OWASP Top Ten (2017)
CWE nodes in this view (graph) are associated with the OWASP Top Ten, as released in 2017.
Thành viên CWE
CWE-1027: OWASP Top Ten 2017 Category A1 - Injection Danh mục
CWE-91: XML Injection
Cơ sở
CWE-1028: OWASP Top Ten 2017 Category A2 - Broken Authentication Danh mục
CWE-1029: OWASP Top Ten 2017 Category A3 - Sensitive Data Exposure Danh mục
CWE-1030: OWASP Top Ten 2017 Category A4 - XML External Entities (XXE) Danh mục
CWE-1031: OWASP Top Ten 2017 Category A5 - Broken Access Control Danh mục
CWE-425: Direct Request
Cơ sở
CWE-1032: OWASP Top Ten 2017 Category A6 - Security Misconfiguration Danh mục
CWE-1033: OWASP Top Ten 2017 Category A7 - Cross-Site Scripting (XSS) Danh mục
CWE-1034: OWASP Top Ten 2017 Category A8 - Insecure Deserialization Danh mục
CWE-1035: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities Danh mục
CWE-1036: OWASP Top Ten 2017 Category A10 - Insufficient Logging & Monitoring Danh mục
Thông tin chế độ xem CWE
Ghi chú ánh xạ lỗ hổng
Lý do : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.Bình luận : Use this View or other Views to search and navigate for the appropriate weakness.
Ghi chú
The relationships in this view have been pulled directly from the 2017 OWASP Top 10 document, either from the explicit mapping section, or from weakness types alluded to in the written sections.Đối tượng
| Bên liên quan | Mô tả |
|---|---|
| Software Developers | This view outlines the most important issues as identified by the OWASP Top Ten (2017 version), providing a good starting point for web application developers who want to code more securely. |
| Product Customers | This view outlines the most important issues as identified by the OWASP Top Ten (2017 version), providing product customers with a way of asking their software development teams to follow minimum expectations for secure code. |
| Educators | Since the OWASP Top Ten covers the most frequently encountered issues, this view can be used by educators as training material for students. |
Gửi
| Tên | Tổ chức | Ngày | Ngày phát hành | Version |
|---|---|---|---|---|
| CWE Content Team | MITRE | 3.1 |
Sửa đổi
| Tên | Tổ chức | Ngày | Bình luận |
|---|---|---|---|
| CWE Content Team | MITRE | updated References | |
| CWE Content Team | MITRE | updated References, View_Audience | |
| CWE Content Team | MITRE | updated Mapping_Notes | |
| CWE Content Team | MITRE | updated References |
Tài liệu tham khảo
REF-957
Top 10 2017https://github.com/OWASP/Top10/blob/master/2017/OWASP%20Top%2010-2017%20(en).pdf
