| Cross-site Scripting (XSS) | |
| Origin Validation Error | |
| Insufficient Compartmentalization | |
| Open Redirect | |
| Insufficient Compartmentalization | |
| Excessive Platform Resource Consumption within a Loop | |
| Incorrect Behavior Order: Authorization Before Parsing and Canonicalization | |
| Improper Access Control | |
| Information Exposure | |
| Server-Side Request Forgery (SSRF) | |
| Incorrect Privilege Assignment | |
| Improper Handling of Insufficient Permissions or Privileges | |
| Exposure of Private Information ('Privacy Violation') | |
| Improper Access Control | |
| Missing Authentication for Critical Function | |
| Improper Handling of Highly Compressed Data (Data Amplification) | |
| Improper Validation of Specified Type of Input | |
| Incorrect Authorization | |
| Incorrect Privilege Assignment | |
| Improper Verification of Cryptographic Signature | |
| Improper Output Neutralization for Logs | |
| Improper Authorization | |
| Incorrect Privilege Assignment | |
| Improperly Implemented Security Check for Standard | |
| Improper Verification of Cryptographic Signature | |
| Missing XML Validation | |
| Incorrect Privilege Assignment | |
| Time-of-check Time-of-use (TOCTOU) | |
| Business Logic Errors | |
| Improper Access Control | |
| HTTP Request Smuggling | |
| Allocation of Resources Without Limits or Throttling | |
| Improper Input Validation | |
| CRLF Injection | |
| Improper Access Control | |
| Cross-site Scripting (XSS) | |
| Files or Directories Accessible to External Parties | |
| Cross-site Scripting (XSS) | |
| Deserialization of Untrusted Data | |
| Binding to an Unrestricted IP Address | |
| Uncontrolled Search Path Element | |
| Session Fixation | |
