Update all CWE IDs on MASWE elements of MASVS-PLATFORM-3.

OWASP · Feb 4, 2025 · e507c9c · e507c9c
1 parent 9362dc3
commit e507c9c
Show file tree

Hide file tree

Showing 4 changed files with 4 additions and 0 deletions.
diff --git a/weaknesses/MASVS-PLATFORM/MASWE-0053.md b/weaknesses/MASVS-PLATFORM/MASWE-0053.md
@@ -7,6 +7,7 @@ profiles: [L2]
 mappings:
   masvs-v1: [MSTG-STORAGE-7]
   masvs-v2: [MASVS-PLATFORM-3, MASVS-STORAGE-2]
+  cwe: [200, 359]
 
 draft:
   description: e.g. leaking passwords, PINs via the UI

diff --git a/weaknesses/MASVS-PLATFORM/MASWE-0054.md b/weaknesses/MASVS-PLATFORM/MASWE-0054.md
@@ -6,6 +6,7 @@ platform: [android, ios]
 profiles: [L2]
 mappings:
   masvs-v2: [MASVS-PLATFORM-3, MASVS-STORAGE-2]
+  cwe: [200, 359]
 
 draft:
   description: e.g. stealing pending intents from notifications via notificationlistenerservice

diff --git a/weaknesses/MASVS-PLATFORM/MASWE-0055.md b/weaknesses/MASVS-PLATFORM/MASWE-0055.md
@@ -7,6 +7,7 @@ profiles: [L2]
 mappings:
   masvs-v1: [MSTG-STORAGE-9]
   masvs-v2: [MASVS-PLATFORM-3, MASVS-STORAGE-2]
+  cwe: [200, 359]
 
 refs:
 - https://developer.android.com/about/versions/14/features/screenshot-detection

diff --git a/weaknesses/MASVS-PLATFORM/MASWE-0056.md b/weaknesses/MASVS-PLATFORM/MASWE-0056.md
@@ -7,6 +7,7 @@ profiles: [L2]
 mappings:
   masvs-v1: [MSTG-PLATFORM-9]
   masvs-v2: [MASVS-PLATFORM-3, MASVS-CODE-1]
+  cwe: [1021]
 
 refs:
 - https://developer.android.com/topic/security/risks/tapjacking