If CNA chooses to use CWE for problemTypes, require cweId #14

Activity

1. zmanion commented on Mar 13, 2025

   

   zmanion

   on Mar 13, 2025

   Last edited by zmanion

   Author

   More actions

   An example, CVE-2024-9428:

   [
     {
       "descriptions": [
         {
           "description": "CWE-79 Cross-Site Scripting (XSS)",
           "lang": "en",
           "type": "CWE"
         }
       ]
     }
   ]

   List of some other malformed records attached, mostly from WPScan.
2. zmanion commented on Mar 13, 2025

   

   zmanion

   on Mar 13, 2025

   Author

   More actions

   See also CVEProject/cve-schema#384.