Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CWE VIEW:Web Based (technology class) Weaknesses
ID:BOSS-309
Vulnerability Mapping:Prohibited
Type:Implicit
Status:Draft
DetailsContent HistoryObserved CVE ExamplesReports
▼Objective

This view categorizes and displays weaknesses by technology class Web Based.

▼Memberships
NatureMappingTypeIDName
HasMemberAllowedV1004Sensitive Cookie Without 'HttpOnly' Flag
HasMemberAllowedB1007Insufficient Visual Distinction of Homoglyphs Presented to User
HasMemberAllowedB1021Improper Restriction of Rendered UI Layers or Frames
HasMemberAllowedV1022Use of Web Link to Untrusted Target with window.opener Access
HasMemberAllowedV113Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')
HasMemberAllowedB1249Application-Level Admin Tool with Inconsistent View of Underlying Operating System
HasMemberAllowedV1275Sensitive Cookie with Improper SameSite Attribute
HasMemberAllowedB425Direct Request ('Forced Browsing')
HasMemberAllowedB444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
HasMemberAllowedB601URL Redirection to Untrusted Site ('Open Redirect')
HasMemberAllowedB611Improper Restriction of XML External Entity Reference
HasMemberAllowedV614Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
HasMemberAllowedV644Improper Neutralization of HTTP Headers for Scripting Syntax
HasMemberAllowedV784Reliance on Cookies without Validation and Integrity Checking in a Security Decision
HasMemberAllowedB79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
HasMemberAllowedV942Permissive Cross-domain Policy with Untrusted Domains
Nature: HasMember
Mapping: Allowed
Type: Variant
ID: 1004
Name: Sensitive Cookie Without 'HttpOnly' Flag
Nature: HasMember
Mapping: Allowed
Type: Base
ID: 1007
Name: Insufficient Visual Distinction of Homoglyphs Presented to User
Nature: HasMember
Mapping: Allowed
Type: Base
ID: 1021
Name: Improper Restriction of Rendered UI Layers or Frames
Nature: HasMember
Mapping: Allowed
Type: Variant
ID: 1022
Name: Use of Web Link to Untrusted Target with window.opener Access
Nature: HasMember
Mapping: Allowed
Type: Variant
ID: 113
Name: Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')
Nature: HasMember
Mapping: Allowed
Type: Base
ID: 1249
Name: Application-Level Admin Tool with Inconsistent View of Underlying Operating System
Nature: HasMember
Mapping: Allowed
Type: Variant
ID: 1275
Name: Sensitive Cookie with Improper SameSite Attribute
Nature: HasMember
Mapping: Allowed
Type: Base
ID: 425
Name: Direct Request ('Forced Browsing')
Nature: HasMember
Mapping: Allowed
Type: Base
ID: 444
Name: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
Nature: HasMember
Mapping: Allowed
Type: Base
ID: 601
Name: URL Redirection to Untrusted Site ('Open Redirect')
Nature: HasMember
Mapping: Allowed
Type: Base
ID: 611
Name: Improper Restriction of XML External Entity Reference
Nature: HasMember
Mapping: Allowed
Type: Variant
ID: 614
Name: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
Nature: HasMember
Mapping: Allowed
Type: Variant
ID: 644
Name: Improper Neutralization of HTTP Headers for Scripting Syntax
Nature: HasMember
Mapping: Allowed
Type: Variant
ID: 784
Name: Reliance on Cookies without Validation and Integrity Checking in a Security Decision
Nature: HasMember
Mapping: Allowed
Type: Base
ID: 79
Name: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Nature: HasMember
Mapping: Allowed
Type: Variant
ID: 942
Name: Permissive Cross-domain Policy with Untrusted Domains
▼Vulnerability Mapping Notes
Usage:Prohibited
Reason:View
Rationale:

This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.

Comments:

Use this View or other Views to search and navigate for the appropriate weakness.

▼Notes
▼Audience
StakeholderDescription
▼References
Expand AllCollapse All
BOSS-309 - Web Based (technology class) Weaknesses
Details not found