Sensitive Cookie with Improper SameSite Attribute Variant level weaknesses typically describe issues in terms of 3 to 5 of the following dimensions: behavior, property, technology, language, and resource. That is linked to a certain type of product, typically involving a specific language or technology. Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Insufficient Verification of Data Authenticity Unintended Proxy or Intermediary ('Confused Deputy') Class level weaknesses typically describe issues in terms of 1 or 2 of the following dimensions: behavior, property, and resource. More specific than a Pillar Weakness, but more general than a Base Weakness. Base level weaknesses typically describe issues in terms of 2 or 3 of the following dimensions: behavior, property, technology, language, and resource.Ĭlass - a weakness that is described in a very abstract fashion, typically independent of any specific language or technology. That is still mostly independent of a resource or technology, but with sufficient details to provide specific methods for detection and prevention. While a composite is a set of weaknesses that must all be present simultaneously in order to produce an exploitable vulnerability. A chain is a set of weaknesses that must be reachable consecutively in order to produce an exploitable vulnerability. A variant is a weakness that is described at a very low level of detail, typically limited to a specific language or technology. Base level weaknesses are used to present a more specific type of weakness. Classes are still very abstract, typically independent of any specific language or technology. Below these top-level entries are weaknesses are varying levels of abstraction. Pillars are weaknesses that are described in the most abstract fashion. Categories (which are not technically weaknesses) are special CWE entries used to group weaknesses that share a common characteristic. At the highest level, categories and pillars exist to group weaknesses.

The following graph shows the tree-like relationships between weaknesses that exist at different levels of abstraction.

Custom maid 3d 2 enum parse error