admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-08-04 08:44:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Updates CWE as per NVD audit

Browse Source
This commit is contained in:
erwanlr 2022-08-01 14:31:50 +02:00
parent 8da47f1bec
commit eb2aa2b1c0
9 changed files with 37 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
2021/24xxx/CVE-2021-24347.json
View File

@ -66,7 +66,7 @@
{
"description": [
{
"value": "CWE-94 Improper Control of Generation of Code ('Code Injection')",
"value": "CWE-178 Improper Handling of Case Sensitivity",
"lang": "eng"
}
]
@ -82,4 +82,4 @@
"source": {
"discovery": "UNKNOWN"
}
}
}

8
2021/24xxx/CVE-2021-24349.json
View File

@ -60,6 +60,14 @@
"lang": "eng"
}
]
},
{
"description": [
{
"value": "CWE-352 Cross-Site Request Forgery (CSRF)",
"lang": "eng"
}
]
}
]
},

4
2021/24xxx/CVE-2021-24728.json
View File

@ -66,7 +66,7 @@
{
"description": [
{
"value": "CWE-79 Cross-site Scripting (XSS)",
"value": "CWE-89 SQL Injection",
"lang": "eng"
}
]
@ -82,4 +82,4 @@
"source": {
"discovery": "UNKNOWN"
}
}
}

2
2021/24xxx/CVE-2021-24739.json
View File

@ -56,7 +56,7 @@
{
"description": [
{
"value": "CWE-285 Improper Authorization",
"value": "CWE-639 Authorization Bypass Through User-Controlled Key",
"lang": "eng"
}
]

8
2021/24xxx/CVE-2021-24822.json
View File

@ -60,6 +60,14 @@
"lang": "eng"
}
]
},
{
"description": [
{
"value": "CWE-352 Cross-Site Request Forgery (CSRF)",
"lang": "eng"
}
]
}
]
},

12
2021/24xxx/CVE-2021-24836.json
View File

@ -56,7 +56,15 @@
{
"description": [
{
"value": "CWE-863 Incorrect Authorization",
"value": "CWE-862 Missing Authorization",
"lang": "eng"
}
]
},
{
"description": [
{
"value": "CWE-352 Cross-Site Request Forgery (CSRF)",
"lang": "eng"
}
]
@ -72,4 +80,4 @@
"source": {
"discovery": "EXTERNAL"
}
}
}

4
2021/25xxx/CVE-2021-25094.json
View File

@ -66,7 +66,7 @@
{
"description": [
{
"value": "CWE-434 Unrestricted Upload of File with Dangerous Type",
"value": "CWE-306 Missing Authentication for Critical Function",
"lang": "eng"
}
]
@ -82,4 +82,4 @@
"source": {
"discovery": "EXTERNAL"
}
}
}

4
2022/0xxx/CVE-2022-0594.json
View File

@ -56,7 +56,7 @@
{
"description": [
{
"value": "CWE-200 Information Exposure",
"value": "CWE-863 Incorrect Authorization",
"lang": "eng"
}
]
@ -72,4 +72,4 @@
"source": {
"discovery": "EXTERNAL"
}
}
}

4
2022/2xxx/CVE-2022-2268.json
View File

@ -56,7 +56,7 @@
{
"description": [
{
"value": "CWE-94 Improper Control of Generation of Code ('Code Injection')",
"value": "CWE-434 Unrestricted Upload of File with Dangerous Type",
"lang": "eng"
}
]
@ -72,4 +72,4 @@
"source": {
"discovery": "EXTERNAL"
}
}
}