[A07, A09:2025] Incorrect CWE-221, CWE-298, CWE-299 Name in List of Mapped CWEs
Nobody has claimed this yet.
- Dominant language
- HTML
- Stars
- 6.1k
- Forks
- 1.1k
- PR merge metrics
- No merged PRs in 30d
Description
Description:
In the List of Mapped CWEs section, three CWEs are currently listed with incorrect or misaligned titles. The names in the documentation do not match the official CWE dictionary.
| CWE ID | Currently Listed As | Correct Official Name |
|---|---|---|
| CWE-298 | Improper Validation of Certificate with Host Mismatch | Improper Validation of Certificate Expiration |
| CWE-299 | Improper Validation of Certificate with Host Mismatch | Improper Check for Certificate Revocation |
| CWE-221 | Information Loss of Omission | Information Loss or Omission |
Why It Matters:
The List of Mapped CWEs section is meant to be a precise technical reference that maps directly to the official CWE catalog. Using an incorrect name can cause confusion for developers and security practitioners who cross-reference with the official CWE documentation.
Steps to Reproduce:
- Navigate to https://owasp.org/Top10/2025/A07_2025-Authentication_Failures/ and https://owasp.org/Top10/2025/A07_2025-Authentication_Failures/
- Scroll down to the List of Mapped CWEs section
- Observe the name listed for CWE-221. CWE-298 and CWE-299
A07 Refrences:
A09 Refrences:
Proposed Fix:
Update the entries for CWE-221, CWE-298, and CWE-299 to match their official names as defined by CWE.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Open the A07 and A09 pages and locate the “List of Mapped CWEs” section. Check the entries for CWE-221, CWE-298, and CWE-299 against the official CWE names provided in the issue. Done means all three documentation entries use the specified names and the pages display the corrected mappings.
Written by the indexing model from the issue text.
Assessment
- Domain
- documentation
- Issue type
- Documentation
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Quiet
- Clarity
- Clearly specified
- Newbie friendliness
- 68/100