Weaknesses in this category are related to the A08 category "Software and Data Integrity Failures" in the OWASP Top Ten 2021.
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| MemberOf | Prohibited | V | 1344 | Weaknesses in OWASP Top Ten (2021) |
| HasMember | Discouraged | C | 345 | Insufficient Verification of Data Authenticity |
| HasMember | Allowed | B | 353 | Missing Support for Integrity Check |
| HasMember | Allowed-with-Review | B | 426 | Untrusted Search Path |
| HasMember | Allowed | B | 494 | Download of Code Without Integrity Check |
| HasMember | Allowed | B | 502 | Deserialization of Untrusted Data |
| HasMember | Allowed | B | 565 | Reliance on Cookies without Validation and Integrity Checking |
| HasMember | Allowed | V | 784 | Reliance on Cookies without Validation and Integrity Checking in a Security Decision |
| HasMember | Allowed | B | 829 | Inclusion of Functionality from Untrusted Control Sphere |
| HasMember | Allowed | V | 830 | Inclusion of Web Functionality from an Untrusted Source |
| HasMember | Allowed | B | 915 | Improperly Controlled Modification of Dynamically-Determined Object Attributes |
This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
See member weaknesses of this category.
As of CWE 4.6, the relationships in this category were pulled directly from the CWE mappings cited in the 2021 OWASP Top Ten. The CWE Program will work with OWASP to improve these mappings, possibly requiring modifications to CWE itself.
N/A
| Taxonomy Name | Entry ID | Fit | Entry Name |
|---|