Labels

Improper Restriction of Names for Files and Other Resources

Security Through Obscurity

Violation of Secure Design Principles

Improper Neutralization

Incorrect Permission Assignment for Critical Resource

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

Command Injection - Generic

Allocation of Resources Without Limits or Throttling

OS Command Injection

Cross-site Scripting (XSS) - Stored

Use of Hard-coded Credentials

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Inclusion of Functionality from Untrusted Control Sphere

Business Logic Errors

Type Confusion

Missing Authorization

Incorrect Authorization

Server-Side Request Forgery (SSRF)

Insecure Storage of Sensitive Information

Code Injection