This view (slice) covers issues that are found in Web Server that are not common to all technologies.
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| HasMember | Allowed-with-Review | C | 116 | Improper Encoding or Escaping of Output |
| HasMember | Allowed | B | 1327 | Binding to an Unrestricted IP Address |
| HasMember | Allowed | V | 1385 | Missing Origin Validation in WebSockets |
| HasMember | Allowed | V | 26 | Path Traversal: '/dir/../filename' |
| HasMember | Discouraged | C | 285 | Improper Authorization |
| HasMember | Allowed | C | 352 | Cross-Site Request Forgery (CSRF) |
| HasMember | Allowed | B | 434 | Unrestricted Upload of File with Dangerous Type |
| HasMember | Allowed-with-Review | C | 642 | External Control of Critical State Data |
| HasMember | Allowed | V | 646 | Reliance on File Name or Extension of Externally-Supplied File |
| HasMember | Allowed | V | 647 | Use of Non-Canonical URL Paths for Authorization Decisions |
| HasMember | Allowed | V | 651 | Exposure of WSDL File Containing Sensitive Information |
| HasMember | Allowed | B | 804 | Guessable CAPTCHA |
| HasMember | Allowed-with-Review | C | 862 | Missing Authorization |
| HasMember | Allowed-with-Review | C | 863 | Incorrect Authorization |
| HasMember | Allowed | B | 918 | Server-Side Request Forgery (SSRF) |
This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
Use this View or other Views to search and navigate for the appropriate weakness.
| Stakeholder | Description |
|---|