地图 / Missing Required Cryptographic Step

Missing Required Cryptographic Step

Missing Required Cryptographic Step · 密码学缺陷

密码学缺陷 / Missing Required Cryptographic Step

11公开报告

—CWE 编号

0已标注发现方式

11关联报告

发现方式分布

暂无发现方式标注。

关联报告

HMAC signature verification omits endpoint and payload allowing request forgery on CoinMate APICoinMate.io · 2026-05-20 · 低危 · 66 票 `check_reserve_proof` sums RingCT ECDH amounts without checking the output commitmentMonero · 2026-08-05 · 低危 · 37 票 SSL options ISSUERCERT, EC_CURVES and CRLFILE silently ignored by non-OpenSSL backendscurl · 2026-01-20 · 低危 · 31 票 SpendProofV1 txid-substitution: get_spend_proof/check_spend_proof do not verify returned transaction hashMonero · 2026-08-05 · 低危 · 28 票 Missing AES-GCM Authentication Tag Validation and Improper Deprecation HandlingNode.js · 2025-12-19 · 中危 · 24 票 Phabricator is vulnerable to padding oracle attacks and chosen-ciphertext attacks.Phabricator · 2017-04-05 · 低危 · $750 · 23 票 Able to bypass HSTS using trailing dotcurl · 2026-02-26 · 低危 · 22 票 CVE-2021-22946: Protocol downgrade required TLS bypassedcurl · 2021-09-24 · 低危 · 10 票 Fedora installation instructions fetch repo and validation key from insecure source, allowing mitm attackDropbox · — · 未评级 · $216 · 10 票 CVE-2022-30115: HSTS bypass via trailing dotcurl · 2022-05-11 · 低危 · 7 票 Constant-time comparison is not always implemented; critical areas are vulnerable to key-timing attacksMonero · 2018-08-06 · 高危 · 6 票