名稱: Weaknesses in OWASP Top Ten (2013)
CWE nodes in this view (graph) are associated with the OWASP Top Ten, as released in 2013. This view is considered obsolete as a newer version of the OWASP Top Ten is available.
CWE 成員
CWE-929: OWASP Top Ten 2013 Category A1 - Injection 類別
CWE-930: OWASP Top Ten 2013 Category A2 - Broken Authentication and Session Management 類別
CWE-931: OWASP Top Ten 2013 Category A3 - Cross-Site Scripting (XSS) 類別
CWE-932: OWASP Top Ten 2013 Category A4 - Insecure Direct Object References 類別
CWE-933: OWASP Top Ten 2013 Category A5 - Security Misconfiguration 類別
CWE-934: OWASP Top Ten 2013 Category A6 - Sensitive Data Exposure 類別
CWE-935: OWASP Top Ten 2013 Category A7 - Missing Function Level Access Control 類別
CWE-936: OWASP Top Ten 2013 Category A8 - Cross-Site Request Forgery (CSRF) 類別
CWE-937: OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities 類別
CWE-938: OWASP Top Ten 2013 Category A10 - Unvalidated Redirects and Forwards 類別
CWE 檢視資訊
漏洞對應備注
理由說明 : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.備註 : Use this View or other Views to search and navigate for the appropriate weakness.
備注
The relationships in this view have been pulled directly from the 2013 OWASP Top 10 document, either from the explicit mapping section, or from weakness types alluded to in the written sections.受眾
| 相關方 | 描述 |
|---|---|
| Software Developers | This view outlines the most important issues as identified by the OWASP Top Ten (2013 version), providing a good starting point for web application developers who want to code more securely. |
| Product Customers | This view outlines the most important issues as identified by the OWASP Top Ten (2013 version), providing customers with a way of asking their software developers to follow minimum expectations for secure code. |
| Educators | Since the OWASP Top Ten covers the most frequently encountered issues, this view can be used by educators as training material for students. |
提交
| 名稱 | 機構 | 日期 | 發布日期 | Version |
|---|---|---|---|---|
| CWE Content Team | MITRE | 2.5 |
修改記錄
| 名稱 | 機構 | 日期 | 備註 |
|---|---|---|---|
| CWE Content Team | MITRE | updated References | |
| CWE Content Team | MITRE | updated Relationship_Notes | |
| CWE Content Team | MITRE | updated Description | |
| CWE Content Team | MITRE | updated View_Audience | |
| CWE Content Team | MITRE | updated Mapping_Notes | |
| CWE Content Team | MITRE | updated References |
參考資料
REF-926
Top 10 2013https://github.com/OWASP/Top10/blob/master/2013/OWASP%20Top%2010%20-%202013.pdf
