Skip to content

fix: correct CWE-201 official name in A01 mapped CWEs list #931

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
NureddinSoltan wants to merge 1 commit into
base: master
Choose a base branch
from
Open

fix: correct CWE-201 official name in A01 mapped CWEs list #931

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion 2025/docs/en/A01_2025-Broken_Access_Control.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -157,7 +157,7 @@ from the command line.

* [CWE-200 Exposure of Sensitive Information to an Unauthorized Actor](https://cwe.mitre.org/data/definitions/200.html)

* [CWE-201 Exposure of Sensitive Information Through Sent Data](https://cwe.mitre.org/data/definitions/201.html)
* [CWE-201 Insertion of Sensitive Information Into Sent Data](https://cwe.mitre.org/data/definitions/201.html)
Copy link
Copy Markdown

@JuditKnoll JuditKnoll Mar 17, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is the same in the 2021 Top 10 list:

Top10/2021/docs/en/A01_2021-Broken_Access_Control.md

Line 144 in 5b475c1

[CWE-201 Exposure of Sensitive Information Through Sent Data](https://cwe.mitre.org/data/definitions/201.html)

As far as I can tell, the title of the CWE was this earlier, see the CWE 201 site back in 2020 July, and it was changed there and not followed up in the OWASP list.

Copy link
Copy Markdown
Author

@NureddinSoltan NureddinSoltan Mar 17, 2026 •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yup, I’m aware of that. That’s why I updated it in 2025, not 2021.
Thank you, Judait. So I’ll keep it open specifically for 2025 docs
@JuditKnoll Should I update it also for 2021?

Copy link
Copy Markdown

@JuditKnoll JuditKnoll Mar 18, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I found it strange, and just realized it, and thought, I'll share it. I'm not sure whether it should be updated in 2021, it depends on when it was modified. IMO the leaders of OWASP Top 10 should decide about this.


* [CWE-219 Storage of File with Sensitive Data Under Web Root](https://cwe.mitre.org/data/definitions/219.html)

Expand Down