Labels

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Insufficient Verification of Data Authenticity

Cross-Site Request Forgery (CSRF)

Privacy Violation

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Time-of-check Time-of-use (TOCTOU) Race Condition

Denial of Service

Improper Handling of Highly Compressed Data (Data Amplification)

Forced Browsing

Unrestricted Upload of File with Dangerous Type

HTTP Request Smuggling

Download of Code Without Integrity Check

Deserialization of Untrusted Data

File and Directory Information Exposure

Open Redirect

Externally Controlled Reference to a Resource in Another Sphere

Insufficient Session Expiration

Unverified Password Change

Insecure Direct Object Reference (IDOR)

Weak Password Recovery Mechanism for Forgotten Password