Skip to content

Commit

Permalink
chore: Update 12.3.3 CWE mapping
Browse files Browse the repository at this point in the history
  • Loading branch information
hazanasec committed Nov 1, 2023
1 parent d5f8e6c commit 9b7de25
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion 5.0/en/0x20-V12-Files-Resources.md
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,7 @@ Although zip bombs are eminently testable using penetration testing techniques,
| :---: | :--- | :---: | :---: | :---: | :---: |
| **12.3.1** | Verify that user-submitted filename metadata is not used directly by system or framework filesystems and that a URL API is used to protect against path traversal. |||| 22 |
| **12.3.2** | Verify that user-submitted filename metadata is validated or ignored to prevent the disclosure, creation, updating or removal of local files (LFI). |||| 73 |
| **12.3.3** | Verify that user-submitted filename metadata is validated or ignored to prevent the disclosure or execution of remote files via Remote File Inclusion (RFI) or Server-side Request Forgery (SSRF) attacks. |||| 98 |
| **12.3.3** | Verify that user-submitted filename metadata is validated or ignored to prevent the disclosure or execution of remote files via Remote File Inclusion (RFI) or Server-side Request Forgery (SSRF) attacks. |||| 73 |
| **12.3.4** | [MOVED TO 12.5.3] | | | | |
| **12.3.5** | [DELETED, DUPLICATE OF 5.3.8] | | | | |
| **12.3.6** | Verify that the application does not include and execute functionality from untrusted sources, such as unverified content distribution networks, JavaScript libraries, node npm libraries, or server-side DLLs. | ||| 829 |
Expand Down

0 comments on commit 9b7de25

Please sign in to comment.