CWE-936
OWASP Top Ten 2013 Category A8 - Cross-Site Request Forgery (CSRF)
2013-07-17 +00:00
指定 CWE 通知
掌握特定 CWE 的任何變更。
名稱: OWASP Top Ten 2013 Category A8 - Cross-Site Request Forgery (CSRF)
Weaknesses in this category are related to the A8 category in the OWASP Top Ten 2013.
CWE 成員列表
CWE 資訊
漏洞對應備注
理由說明 : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.備註 : See member weaknesses of this category.
提交
| 名稱 | 機構 | 日期 | 發布日期 | Version |
|---|---|---|---|---|
| CWE Content Team | MITRE | 2.5 |
修改記錄
| 名稱 | 機構 | 日期 | 備註 |
|---|---|---|---|
| CWE Content Team | MITRE | updated Mapping_Notes | |
| CWE Content Team | MITRE | updated Mapping_Notes | |
| CWE Content Team | MITRE | updated References |
參考資料
REF-935
Top 10 2013-A8-Cross-Site Request Forgery (CSRF)OWASP.
https://web.archive.org/web/20180324124708/https://www.owasp.org/index.php/Top_10_2013-A7-Missing_Function_Level_Access_Control
