vrt 0.13.4 → 0.13.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/data/1.16/deprecated-node-mapping.json +332 -0
- data/lib/data/1.16/mappings/cvss_v3/cvss_v3.json +1335 -0
- data/lib/data/1.16/mappings/cvss_v3/cvss_v3.schema.json +59 -0
- data/lib/data/1.16/mappings/cwe/cwe.json +1167 -0
- data/lib/data/1.16/mappings/cwe/cwe.schema.json +63 -0
- data/lib/data/1.16/mappings/remediation_advice/remediation_advice.json +2101 -0
- data/lib/data/1.16/mappings/remediation_advice/remediation_advice.schema.json +75 -0
- data/lib/data/1.16/third-party-mappings/remediation_training/secure-code-warrior-links.json +520 -0
- data/lib/data/1.16/vrt.schema.json +63 -0
- data/lib/data/1.16/vulnerability-rating-taxonomy.json +3244 -0
- data/lib/vrt/version.rb +1 -1
- metadata +13 -3
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 7fbdd0305ebe5531b826cb4b150e899583efb90285833abd49cd5bb41f302392
|
|
4
|
+
data.tar.gz: 78da0bff13f4664c6ff06a95a8b7e374f2d60329f0f8695f122ebfb5e64f5151
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 0d2b07795fa348dbeeb4b19721f75c4f8285a33fac8fdc33027fa618425441873282b0555a50594dd9b43425c94fb6ecaff1723b3b72071a398ef52fb5dbb957
|
|
7
|
+
data.tar.gz: f4a82c37f4edc34f0c276f266e424526a077d94f80374945873a70f2c6b12ea9555706a951fef9ad6ccefdf5434260aee1ba766076655b23bf2e84b0f764da0f
|
|
@@ -0,0 +1,332 @@
|
|
|
1
|
+
{
|
|
2
|
+
"poor_physical_security": {
|
|
3
|
+
"1.1": "other"
|
|
4
|
+
},
|
|
5
|
+
"social_engineering": {
|
|
6
|
+
"1.1": "other"
|
|
7
|
+
},
|
|
8
|
+
"cross_site_scripting_xss.reflected.admin_to_anyone": {
|
|
9
|
+
"1.1": "other"
|
|
10
|
+
},
|
|
11
|
+
"cross_site_scripting_xss.reflected.non_admin_to_anyone": {
|
|
12
|
+
"1.1": "other"
|
|
13
|
+
},
|
|
14
|
+
"broken_authentication_and_session_management.authentication_bypass.horizontal": {
|
|
15
|
+
"1.2": "other"
|
|
16
|
+
},
|
|
17
|
+
"broken_authentication_and_session_management.authentication_bypass.vertical": {
|
|
18
|
+
"1.2": "other"
|
|
19
|
+
},
|
|
20
|
+
"insecure_data_storage.insecure_data_storage": {
|
|
21
|
+
"1.2": "other"
|
|
22
|
+
},
|
|
23
|
+
"insecure_data_storage.insecure_data_storage.password": {
|
|
24
|
+
"1.2": "other"
|
|
25
|
+
},
|
|
26
|
+
"insufficient_security_configurability.weak_password_policy.allows_password_to_be_same_as_email_username": {
|
|
27
|
+
"1.2": "other"
|
|
28
|
+
},
|
|
29
|
+
"insufficient_security_configurability.weak_password_policy.allows_reuse_of_old_passwords": {
|
|
30
|
+
"1.2": "other"
|
|
31
|
+
},
|
|
32
|
+
"insufficient_security_configurability.weak_password_policy.complexity_char_type_not_enforced": {
|
|
33
|
+
"1.2": "other"
|
|
34
|
+
},
|
|
35
|
+
"insufficient_security_configurability.weak_password_policy.complexity_length_not_enforced": {
|
|
36
|
+
"1.2": "other"
|
|
37
|
+
},
|
|
38
|
+
"sensitive_data_exposure.mixed_content.requires_being_a_man_in_the_middle": {
|
|
39
|
+
"1.2": "other"
|
|
40
|
+
},
|
|
41
|
+
"sensitive_data_exposure.mixed_content.sensitive_data_disclosure": {
|
|
42
|
+
"1.2": "other"
|
|
43
|
+
},
|
|
44
|
+
"sensitive_data_exposure.token_leakage_via_referer.over_https": {
|
|
45
|
+
"1.2": "other"
|
|
46
|
+
},
|
|
47
|
+
"unvalidated_redirects_and_forwards.open_redirect.get_based_all_users": {
|
|
48
|
+
"1.2": "unvalidated_redirects_and_forwards.open_redirect.get_based"
|
|
49
|
+
},
|
|
50
|
+
"unvalidated_redirects_and_forwards.open_redirect.get_based_authenticated": {
|
|
51
|
+
"1.2": "unvalidated_redirects_and_forwards.open_redirect.get_based"
|
|
52
|
+
},
|
|
53
|
+
"unvalidated_redirects_and_forwards.open_redirect.get_based_unauthenticated": {
|
|
54
|
+
"1.2": "unvalidated_redirects_and_forwards.open_redirect.get_based"
|
|
55
|
+
},
|
|
56
|
+
"broken_authentication_and_session_management.session_token_in_url.over_https": {
|
|
57
|
+
"1.2": "sensitive_data_exposure.sensitive_token_in_url"
|
|
58
|
+
},
|
|
59
|
+
"broken_authentication_and_session_management.session_token_in_url.over_http": {
|
|
60
|
+
"1.2": "sensitive_data_exposure.sensitive_token_in_url"
|
|
61
|
+
},
|
|
62
|
+
"broken_authentication_and_session_management.session_token_in_url": {
|
|
63
|
+
"1.2": "sensitive_data_exposure.sensitive_token_in_url"
|
|
64
|
+
},
|
|
65
|
+
"insecure_data_transport": {
|
|
66
|
+
"1.2": "mobile_security_misconfiguration"
|
|
67
|
+
},
|
|
68
|
+
"insecure_data_transport.ssl_certificate_pinning": {
|
|
69
|
+
"1.2": "mobile_security_misconfiguration.ssl_certificate_pinning"
|
|
70
|
+
},
|
|
71
|
+
"insecure_data_transport.ssl_certificate_pinning.absent": {
|
|
72
|
+
"1.2": "mobile_security_misconfiguration.ssl_certificate_pinning.absent"
|
|
73
|
+
},
|
|
74
|
+
"insecure_data_transport.ssl_certificate_pinning.defeatable": {
|
|
75
|
+
"1.2": "mobile_security_misconfiguration.ssl_certificate_pinning.defeatable"
|
|
76
|
+
},
|
|
77
|
+
"insecure_data_storage.credentials_stored_unencrypted": {
|
|
78
|
+
"1.2": "insecure_data_storage.sensitive_application_data_stored_unencrypted"
|
|
79
|
+
},
|
|
80
|
+
"insecure_data_storage.credentials_stored_unencrypted.on_external_storage": {
|
|
81
|
+
"1.2": "insecure_data_storage.sensitive_application_data_stored_unencrypted.on_external_storage"
|
|
82
|
+
},
|
|
83
|
+
"insecure_data_storage.credentials_stored_unencrypted.on_internal_storage": {
|
|
84
|
+
"1.2": "insecure_data_storage.sensitive_application_data_stored_unencrypted.on_internal_storage"
|
|
85
|
+
},
|
|
86
|
+
"insufficient_security_configurability.weak_password_policy.complexity_both_length_and_char_type_not_enforced": {
|
|
87
|
+
"1.2": "insufficient_security_configurability.no_password_policy"
|
|
88
|
+
},
|
|
89
|
+
"missing_function_level_access_control": {
|
|
90
|
+
"1.3": "broken_access_control"
|
|
91
|
+
},
|
|
92
|
+
"missing_function_level_access_control.server_side_request_forgery_ssrf": {
|
|
93
|
+
"1.3": "broken_access_control.server_side_request_forgery_ssrf"
|
|
94
|
+
},
|
|
95
|
+
"missing_function_level_access_control.server_side_request_forgery_ssrf.internal": {
|
|
96
|
+
"1.3": "broken_access_control.server_side_request_forgery_ssrf.internal"
|
|
97
|
+
},
|
|
98
|
+
"missing_function_level_access_control.server_side_request_forgery_ssrf.external": {
|
|
99
|
+
"1.3": "broken_access_control.server_side_request_forgery_ssrf.external"
|
|
100
|
+
},
|
|
101
|
+
"missing_function_level_access_control.username_enumeration": {
|
|
102
|
+
"1.3": "broken_access_control.username_enumeration"
|
|
103
|
+
},
|
|
104
|
+
"missing_function_level_access_control.username_enumeration.data_leak": {
|
|
105
|
+
"1.3": "broken_access_control.username_enumeration.data_leak"
|
|
106
|
+
},
|
|
107
|
+
"missing_function_level_access_control.exposed_sensitive_android_intent": {
|
|
108
|
+
"1.3": "broken_access_control.exposed_sensitive_android_intent"
|
|
109
|
+
},
|
|
110
|
+
"missing_function_level_access_control.exposed_sensitive_ios_url_scheme": {
|
|
111
|
+
"1.3": "broken_access_control.exposed_sensitive_ios_url_scheme"
|
|
112
|
+
},
|
|
113
|
+
"insecure_direct_object_references_idor": {
|
|
114
|
+
"1.3": "broken_access_control.idor"
|
|
115
|
+
},
|
|
116
|
+
"broken_authentication_and_session_management.weak_login_function.over_http": {
|
|
117
|
+
"1.4": "broken_authentication_and_session_management.weak_login_function.https_not_available_or_http_by_default"
|
|
118
|
+
},
|
|
119
|
+
"cross_site_scripting_xss.ie_only.older_version_ie_10_11": {
|
|
120
|
+
"1.4": "cross_site_scripting_xss.ie_only.ie11"
|
|
121
|
+
},
|
|
122
|
+
"cross_site_scripting_xss.ie_only.older_version_ie10": {
|
|
123
|
+
"1.4": "cross_site_scripting_xss.ie_only.older_version_ie11"
|
|
124
|
+
},
|
|
125
|
+
"broken_authentication_and_session_management.failure_to_invalidate_session.on_password_reset": {
|
|
126
|
+
"1.4": "broken_authentication_and_session_management.failure_to_invalidate_session.on_password_change"
|
|
127
|
+
},
|
|
128
|
+
"network_security_misconfiguration.telnet_enabled.credentials_required": {
|
|
129
|
+
"1.4": "broken_authentication_and_session_management.weak_login_function.other_plaintext_protocol_no_secure_alternative"
|
|
130
|
+
},
|
|
131
|
+
"server_security_misconfiguration.using_default_credentials.production_server": {
|
|
132
|
+
"1.4": "other"
|
|
133
|
+
},
|
|
134
|
+
"server_security_misconfiguration.using_default_credentials.staging_development_server": {
|
|
135
|
+
"1.4": "other"
|
|
136
|
+
},
|
|
137
|
+
"server_side_injection.sql_injection.blind": {
|
|
138
|
+
"1.4": "other"
|
|
139
|
+
},
|
|
140
|
+
"server_side_injection.sql_injection.error_based": {
|
|
141
|
+
"1.4": "other"
|
|
142
|
+
},
|
|
143
|
+
"server_security_misconfiguration.misconfigured_dns.subdomain_takeover": {
|
|
144
|
+
"1.5": "other"
|
|
145
|
+
},
|
|
146
|
+
"server_security_misconfiguration.mail_server_misconfiguration.missing_spf_on_email_domain": {
|
|
147
|
+
"1.5": "server_security_misconfiguration.mail_server_misconfiguration.email_spoofing_on_email_domain"
|
|
148
|
+
},
|
|
149
|
+
"server_security_misconfiguration.mail_server_misconfiguration.email_spoofable_via_third_party_api_misconfiguration": {
|
|
150
|
+
"1.5": "server_security_misconfiguration.mail_server_misconfiguration.email_spoofing_on_email_domain"
|
|
151
|
+
},
|
|
152
|
+
"cross_site_scripting_xss.stored.admin_to_anyone": {
|
|
153
|
+
"1.5": "cross_site_scripting_xss.stored.privileged_user_to_privilege_elevation"
|
|
154
|
+
},
|
|
155
|
+
"server_security_misconfiguration.captcha_bypass": {
|
|
156
|
+
"1.5": "server_security_misconfiguration.captcha"
|
|
157
|
+
},
|
|
158
|
+
"server_security_misconfiguration.captcha_bypass.implementation_vulnerability": {
|
|
159
|
+
"1.5": "server_security_misconfiguration.captcha.implementation_vulnerability"
|
|
160
|
+
},
|
|
161
|
+
"server_security_misconfiguration.captcha_bypass.brute_force": {
|
|
162
|
+
"1.5": "server_security_misconfiguration.captcha.brute_force"
|
|
163
|
+
},
|
|
164
|
+
"broken_access_control.server_side_request_forgery_ssrf.internal": {
|
|
165
|
+
"1.6": "broken_access_control.server_side_request_forgery_ssrf.internal_high_impact"
|
|
166
|
+
},
|
|
167
|
+
"server_security_misconfiguration.mail_server_misconfiguration.email_spoofing_on_email_domain": {
|
|
168
|
+
"1.6": "server_security_misconfiguration.mail_server_misconfiguration.no_spoofing_protection_on_email_domain"
|
|
169
|
+
},
|
|
170
|
+
"server_security_misconfiguration.mail_server_misconfiguration.missing_spf_on_non_email_domain": {
|
|
171
|
+
"1.6": "server_security_misconfiguration.mail_server_misconfiguration.missing_or_misconfigured_spf_and_or_dkim"
|
|
172
|
+
},
|
|
173
|
+
"server_security_misconfiguration.mail_server_misconfiguration.spf_uses_a_soft_fail": {
|
|
174
|
+
"1.6": "server_security_misconfiguration.mail_server_misconfiguration.missing_or_misconfigured_spf_and_or_dkim"
|
|
175
|
+
},
|
|
176
|
+
"server_security_misconfiguration.mail_server_misconfiguration.spf_includes_10_lookups": {
|
|
177
|
+
"1.6": "server_security_misconfiguration.mail_server_misconfiguration.missing_or_misconfigured_spf_and_or_dkim"
|
|
178
|
+
},
|
|
179
|
+
"server_security_misconfiguration.mail_server_misconfiguration.missing_dmarc": {
|
|
180
|
+
"1.6": "server_security_misconfiguration.mail_server_misconfiguration.email_spoofing_to_inbox_due_to_missing_or_misconfigured_dmarc_on_email_domain"
|
|
181
|
+
},
|
|
182
|
+
"insufficient_security_configurability.weak_2fa_implementation.missing_failsafe": {
|
|
183
|
+
"1.7": "other"
|
|
184
|
+
},
|
|
185
|
+
"broken_access_control.username_enumeration.data_leak": {
|
|
186
|
+
"1.7": "broken_access_control.username_enumeration.non_brute_force"
|
|
187
|
+
},
|
|
188
|
+
"insufficient_security_configurability.weak_2fa_implementation": {
|
|
189
|
+
"1.7": "insufficient_security_configurability.weak_two_fa_implementation"
|
|
190
|
+
},
|
|
191
|
+
"sensitive_data_exposure.token_leakage_via_referer.trusted_3rd_party": {
|
|
192
|
+
"1.7": "sensitive_data_exposure.token_leakage_via_referer.trusted_third_party"
|
|
193
|
+
},
|
|
194
|
+
"sensitive_data_exposure.token_leakage_via_referer.untrusted_3rd_party": {
|
|
195
|
+
"1.7": "sensitive_data_exposure.token_leakage_via_referer.untrusted_third_party"
|
|
196
|
+
},
|
|
197
|
+
"cross_site_scripting_xss.ie_only.ie11": {
|
|
198
|
+
"1.7": "cross_site_scripting_xss.ie_only.ie_eleven"
|
|
199
|
+
},
|
|
200
|
+
"cross_site_scripting_xss.ie_only.older_version_ie11": {
|
|
201
|
+
"1.7": "cross_site_scripting_xss.ie_only.older_version_ie_eleven"
|
|
202
|
+
},
|
|
203
|
+
"mobile_security_misconfiguration.clipboard_enabled.on_non_sensitive_content": {
|
|
204
|
+
"1.8": "other"
|
|
205
|
+
},
|
|
206
|
+
"mobile_security_misconfiguration.clipboard_enabled.on_sensitive_content": {
|
|
207
|
+
"1.8": "other"
|
|
208
|
+
},
|
|
209
|
+
"sensitive_data_exposure.critically_sensitive_data.password_disclosure": {
|
|
210
|
+
"1.9": "sensitive_data_exposure.disclosure_of_secrets"
|
|
211
|
+
},
|
|
212
|
+
"sensitive_data_exposure.critically_sensitive_data.private_api_keys": {
|
|
213
|
+
"1.9": "sensitive_data_exposure.disclosure_of_secrets"
|
|
214
|
+
},
|
|
215
|
+
"sensitive_data_exposure.critically_sensitive_data": {
|
|
216
|
+
"1.9": "sensitive_data_exposure"
|
|
217
|
+
},
|
|
218
|
+
"insufficient_security_configurability.lack_of_verification_email": {
|
|
219
|
+
"1.10": "insufficient_security_configurability.verification_of_contact_method_not_required"
|
|
220
|
+
},
|
|
221
|
+
"broken_authentication_and_session_management.weak_login_function.https_not_available_or_http_by_default": {
|
|
222
|
+
"1.10": "broken_authentication_and_session_management.weak_login_function.over_http"
|
|
223
|
+
},
|
|
224
|
+
"broken_authentication_and_session_management.weak_login_function.http_and_https_available": {
|
|
225
|
+
"1.10": "broken_authentication_and_session_management.weak_login_function.over_http"
|
|
226
|
+
},
|
|
227
|
+
"broken_authentication_and_session_management.weak_login_function.lan_only": {
|
|
228
|
+
"1.10": "broken_authentication_and_session_management.weak_login_function.over_http"
|
|
229
|
+
},
|
|
230
|
+
"cross_site_request_forgery_csrf.flash_based.high_impact": {
|
|
231
|
+
"1.10": "cross_site_request_forgery_csrf.flash_based"
|
|
232
|
+
},
|
|
233
|
+
"cross_site_request_forgery_csrf.flash_based.low_impact": {
|
|
234
|
+
"1.10": "cross_site_request_forgery_csrf.flash_based"
|
|
235
|
+
},
|
|
236
|
+
"automotive_security_misconfiguration.infotainment": {
|
|
237
|
+
"1.10": "automotive_security_misconfiguration.infotainment_radio_head_unit"
|
|
238
|
+
},
|
|
239
|
+
"automotive_security_misconfiguration.infotainment.pii_leakage": {
|
|
240
|
+
"1.10": "automotive_security_misconfiguration.infotainment_radio_head_unit.pii_leakage"
|
|
241
|
+
},
|
|
242
|
+
"automotive_security_misconfiguration.infotainment.code_execution_can_bus_pivot": {
|
|
243
|
+
"1.10": "automotive_security_misconfiguration.infotainment_radio_head_unit.code_execution_can_bus_pivot"
|
|
244
|
+
},
|
|
245
|
+
"automotive_security_misconfiguration.infotainment.code_execution_no_can_bus_pivot": {
|
|
246
|
+
"1.10": "automotive_security_misconfiguration.infotainment_radio_head_unit.code_execution_no_can_bus_pivot"
|
|
247
|
+
},
|
|
248
|
+
"automotive_security_misconfiguration.infotainment.unauthorized_access_to_services": {
|
|
249
|
+
"1.10": "automotive_security_misconfiguration.infotainment_radio_head_unit.unauthorized_access_to_services"
|
|
250
|
+
},
|
|
251
|
+
"automotive_security_misconfiguration.infotainment.source_code_dump": {
|
|
252
|
+
"1.10": "automotive_security_misconfiguration.infotainment_radio_head_unit.source_code_dump"
|
|
253
|
+
},
|
|
254
|
+
"automotive_security_misconfiguration.infotainment.dos_brick": {
|
|
255
|
+
"1.10": "automotive_security_misconfiguration.infotainment_radio_head_unit.dos_brick"
|
|
256
|
+
},
|
|
257
|
+
"automotive_security_misconfiguration.infotainment.default_credentials": {
|
|
258
|
+
"1.10": "automotive_security_misconfiguration.infotainment_radio_head_unit.default_credentials"
|
|
259
|
+
},
|
|
260
|
+
"broken_cryptography": {
|
|
261
|
+
"1.11": "other"
|
|
262
|
+
},
|
|
263
|
+
"broken_cryptography.cryptographic_flaw": {
|
|
264
|
+
"1.11": "other"
|
|
265
|
+
},
|
|
266
|
+
"broken_cryptography.cryptographic_flaw.incorrect_usage": {
|
|
267
|
+
"1.11": "other"
|
|
268
|
+
},
|
|
269
|
+
"cross_site_scripting_xss.ie_only.ie_eleven": {
|
|
270
|
+
"1.11": "other"
|
|
271
|
+
},
|
|
272
|
+
"cross_site_scripting_xss.ie_only.older_version_ie_eleven": {
|
|
273
|
+
"1.11": "cross_site_scripting_xss.ie_only"
|
|
274
|
+
},
|
|
275
|
+
"cross_site_scripting_xss.ie_only.xss_filter_disabled": {
|
|
276
|
+
"1.11": "other"
|
|
277
|
+
},
|
|
278
|
+
"automotive_security_misconfiguration.infotainment_radio_head_unit.pii_leakage": {
|
|
279
|
+
"1.11": "automotive_security_misconfiguration.infotainment_radio_head_unit.sensitive_data_leakage_exposure"
|
|
280
|
+
},
|
|
281
|
+
"broken_access_control.server_side_request_forgery_ssrf": {
|
|
282
|
+
"1.11": "server_security_misconfiguration.server_side_request_forgery_ssrf"
|
|
283
|
+
},
|
|
284
|
+
"broken_access_control.server_side_request_forgery_ssrf.internal_high_impact": {
|
|
285
|
+
"1.11": "server_security_misconfiguration.server_side_request_forgery_ssrf.internal_high_impact"
|
|
286
|
+
},
|
|
287
|
+
"broken_access_control.server_side_request_forgery_ssrf.internal_scan_and_or_medium_impact": {
|
|
288
|
+
"1.11": "server_security_misconfiguration.server_side_request_forgery_ssrf.internal_scan_and_or_medium_impact"
|
|
289
|
+
},
|
|
290
|
+
"broken_access_control.server_side_request_forgery_ssrf.dns_query_only": {
|
|
291
|
+
"1.11": "server_security_misconfiguration.server_side_request_forgery_ssrf.external_dns_query_only"
|
|
292
|
+
},
|
|
293
|
+
"broken_access_control.server_side_request_forgery_ssrf.external": {
|
|
294
|
+
"1.11": "server_security_misconfiguration.server_side_request_forgery_ssrf.external_low_impact"
|
|
295
|
+
},
|
|
296
|
+
"broken_authentication_and_session_management.privilege_escalation": {
|
|
297
|
+
"1.14": "broken_access_control.privilege_escalation"
|
|
298
|
+
},
|
|
299
|
+
"server_security_misconfiguration.misconfigured_dns.high_impact_subdomain_takeover": {
|
|
300
|
+
"1.14.2": "other"
|
|
301
|
+
},
|
|
302
|
+
"server_security_misconfiguration.misconfigured_dns.basic_subdomain_takeover": {
|
|
303
|
+
"1.14.2": "server_security_misconfiguration.misconfigured_dns.subdomain_takeover"
|
|
304
|
+
},
|
|
305
|
+
"broken_access_control.idor.read_edit_delete_non_sensitive_information": {
|
|
306
|
+
"1.15": "broken_access_control.idor.view_non_sensitive_information"
|
|
307
|
+
},
|
|
308
|
+
"broken_access_control.idor.read_edit_delete_sensitive_information_guid": {
|
|
309
|
+
"1.15": "broken_access_control.idor.modify_view_sensitive_information_guid"
|
|
310
|
+
},
|
|
311
|
+
"broken_access_control.idor.read_sensitive_information_iterable_object_identifiers": {
|
|
312
|
+
"1.15": "broken_access_control.idor.modify_view_sensitive_information_iterable_object_identifiers"
|
|
313
|
+
},
|
|
314
|
+
"broken_access_control.idor.edit_delete_sensitive_information_iterable_object_identifiers": {
|
|
315
|
+
"1.15": "broken_access_control.idor.modify_sensitive_information_iterable_object_identifiers"
|
|
316
|
+
},
|
|
317
|
+
"broken_access_control.idor.read_edit_delete_sensitive_information_iterable_object_identifiers": {
|
|
318
|
+
"1.15": "broken_access_control.idor.modify_view_sensitive_information_iterable_object_identifiers"
|
|
319
|
+
},
|
|
320
|
+
"ai_application_security.llm_security.excessive_agency_permission_manipulation": {
|
|
321
|
+
"1.16": "other"
|
|
322
|
+
},
|
|
323
|
+
"ai_application_security.llm_security.llm_output_handling": {
|
|
324
|
+
"1.16": "other"
|
|
325
|
+
},
|
|
326
|
+
"ai_application_security.llm_security.prompt_injection": {
|
|
327
|
+
"1.16": "other"
|
|
328
|
+
},
|
|
329
|
+
"ai_application_security.llm_security.training_data_poisoning": {
|
|
330
|
+
"1.16": "other"
|
|
331
|
+
}
|
|
332
|
+
}
|