From 8fa8f657335033489df059c0ef756f003034b035 Mon Sep 17 00:00:00 2001 From: Ajin Abraham Date: Sat, 26 Feb 2022 15:39:22 -0800 Subject: [PATCH] Update cwe.yaml --- libsast/standards/cwe.yaml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/libsast/standards/cwe.yaml b/libsast/standards/cwe.yaml index 5efa979..41ab112 100644 --- a/libsast/standards/cwe.yaml +++ b/libsast/standards/cwe.yaml @@ -124,6 +124,7 @@ cwe: cwe-182: "CWE-182: Collapse of Data into Unsafe Value" cwe-183: "CWE-183: Permissive List of Allowed Inputs" cwe-184: "CWE-184: Incomplete List of Disallowed Inputs" + cwe-185: "CWE-185: Incorrect Regular Expression" cwe-186: "CWE-186: Overly Restrictive Regular Expression" cwe-188: "CWE-188: Reliance on Data/Memory Layout" cwe-19: "CWE-19: Data Handling" @@ -283,7 +284,7 @@ cwe: cwe-408: "CWE-408: Incorrect Behavior Order: Early Amplification" cwe-409: "CWE-409: Improper Handling of Highly Compressed Data (Data Amplification)" cwe-41: "CWE-41: Improper Resolution of Path Equivalence" - cwe-400: "Uncontrolled Resource Consumption" + cwe-400: "CWE-400: Uncontrolled Resource Consumption" cwe-410: "CWE-410: Insufficient Resource Pool" cwe-412: "CWE-412: Unrestricted Externally Accessible Lock" cwe-413: "CWE-413: Improper Resource Locking" @@ -468,6 +469,7 @@ cwe: cwe-795: "CWE-795: Only Filtering Special Elements at a Specified Location" cwe-798: "CWE-798: Use of Hard-coded Credentials" cwe-799: "CWE-799: Improper Control of Interaction Frequency" + cwe-80: "CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)" cwe-804: "CWE-804: Guessable CAPTCHA" cwe-805: "CWE-805: Buffer Access with Incorrect Length Value" cwe-807: "CWE-807: Reliance on Untrusted Inputs in a Security Decision"