Weakness (CWE)
CWE-345: Insufficient Verification of Data Authenticity
Class Draft Mapping discouraged
The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
Source: MITRE CWE-345
82 results · Clear filters · Feed
-
Critical 9.8
Insufficient Verification of Data Authenticity in python-keystoneclient
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass
-
Critical 9.8
Prototype Pollution in defaults-deep
A prototype pollution vulnerability was found in defaults-deep <=0.2.4 that would allow a malicious user to inject properties onto Object.prototype.