Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1032: OWASP Top Ten 2017 Category A6 - Security Misconfiguration

Category Incomplete Mapping prohibited

Weaknesses in this category are related to the A6 category in the OWASP Top Ten 2017.

Source: MITRE CWE-1032

1 result · Clear filters · Feed

  • Medium 5.4

    HCL AION is susceptible to Bypass of the script allow list configuration vulnerability

    A vulnerability  Bypass of the script allowlist configuration in HCL AION.  An incorrectly configured Content-Security-Policy header may allow unauthorized scripts to execute, increasing the risk of cross-site scripting and other injection-based attacks.This …