Home / Vulnerability Database / HTML5 : Missing required cryptographic step
HTML5
HTML5 : Missing required cryptographic step
Classification
OWASP Top 10 2013
OWASP Top 10 2017
OWASP Top 10 2021
OWASP ASVS
PCI DSS 4.0
HIPAA
Overview
Not using a hash function in the script and link tags is unsafe.
Using checksum verification allows you to protect yourself from accidental or intentional damage to the files you connect, as well as from their tampering.
References
- CWE-325: Missing Required Cryptographic Step
- CWE-353: Missing Support for Integrity Check
- CWE CATEGORY: OWASP Top Ten 2017 Category A6 - Security Misconfiguration
- OWASP Top 10 2017-A3-Sensitive Data Exposure
- OWASP Top 10 2021-A2-Cryptographic Failures
- OWASP Top 10 2021-A4-Insecure Design
- Understanding Subresource Integrity
CRITICAL
DerScanner Severity Score
Do you want to fix HTML5 : Missing required cryptographic step in your application?
See also
HTML5
HTML5 : Weak hashing algorithm
HTML5
HTML5 : Cross-site request forgery (CSRF)
HTML5