目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

CWE-345 对数据真实性的验证不充分 类漏洞列表 414

CWE-345 对数据真实性的验证不充分 类弱点 414 条 CVE 漏洞汇总，含 AI 中文分析。

CWE-345 属于数据完整性与真实性验证不足的安全漏洞。攻击者通常通过伪造或篡改数据源，使系统误信无效或恶意信息，从而执行非预期操作或泄露敏感数据。开发者应实施严格的身份认证机制，如使用数字签名或加密哈希，确保数据来源可信且未被篡改，并在关键业务逻辑前强制进行真实性校验，以阻断恶意数据的注入与处理。

MITRE CWE 官方描述
CWE：CWE-345 数据真实性验证不足 (Insufficient Verification of Data Authenticity) 英文：产品未能以足以防止其接受无效数据的方式，充分验证数据的来源或真实性。
常见影响 (1)
Integrity, Other Varies by Context, Unexpected State
代码示例 (1)
In 2022, the OT:ICEFALL study examined products by 10 different Operational Technology (OT) vendors. The researchers reported 56 vulnerabilities and said that the products were "insecure by design" [REF-1283]. If exploited, these vulnerabilities often allowed adversaries to change how the products operated, ranging from denial of service to changing the code that the products executed. Since these…
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-81702 Tobi OpenSSL Encrypt 输入验证错误漏洞 — openssl_encrypt 9.8 Critical 2026-08-27
CVE-2026-55663 versatica mediasoup 输入验证错误漏洞 — mediasoup 5.6 Medium 2026-08-25
CVE-2026-78417 Devolutions remote desktop manager 输入验证错误漏洞 — Remote Desktop Manager - - 2026-08-24
CVE-2026-62204 SiYuan 输入验证错误漏洞 — siyuan 6.6 Medium 2026-08-22
CVE-2026-58002 WWBN AVideo 输入验证错误漏洞 — AVideo 6.5 Medium 2026-08-22
CVE-2026-66787 Google Lighthouse 输入验证错误漏洞 — Red Hat Advanced Cluster Management for Kubernetes 2.16 8.7 High 2026-08-20
CVE-2026-66785 Submariner Operator 输入验证错误漏洞 — Red Hat Advanced Cluster Management for Kubernetes 2.16 8.7 High 2026-08-20
CVE-2026-53425 Dropbox Samly 输入验证错误漏洞 — samly 7.6 High 2026-08-20
CVE-2026-44725 EMQ Technologies EMQX 输入验证错误漏洞 — emqx 6.6 Medium 2026-08-20
CVE-2026-68554 Coturn 输入验证错误漏洞 — coturn 2.3 Low 2026-08-19
CVE-2026-76245 eidetic-labs stigmem 输入验证错误漏洞 — stigmem 7.1 High 2026-08-19
CVE-2026-52737 Zcash Foundation ZEBRA 输入验证错误漏洞 — zebra 5.3 Medium 2026-08-18
CVE-2026-18674 Kuma 输入验证错误漏洞 — Kong Mesh 7.0 High 2026-08-17
CVE-2026-74890 Tobi OpenSSL Encrypt 输入验证错误漏洞 — openssl_encrypt 5.5 Medium 2026-08-17
CVE-2026-74882 jahlives openssl_encrypt 输入验证错误漏洞 — openssl_encrypt 7.5 High 2026-08-17
CVE-2026-74875 jahlives openssl_encrypt 输入验证错误漏洞 — openssl_encrypt 9.8 Critical 2026-08-17
CVE-2026-73846 onData CKAN MCP Server 输入验证错误漏洞 — ckan-mcp-server 6.5 Medium 2026-08-14
CVE-2026-72817 go-chi chi 输入验证错误漏洞 — chi 6.5 Medium 2026-08-14
CVE-2026-28185 WordPress Log in with Google 输入验证错误漏洞 — Log in with Google 9.8 Critical 2026-08-13
CVE-2026-73419 Auth.js 输入验证错误漏洞 — next-auth 6.8 Medium 2026-08-12
CVE-2026-69105 JFrog artifactory 输入验证错误漏洞 — artifactory 8.1 High 2026-08-12
CVE-2026-62869 Microsoft Entra 输入验证错误漏洞 — Microsoft Entra 8.8 High 2026-08-11
CVE-2026-72544 OpenSignLabs OpenSign 输入验证错误漏洞 — OpenSign 7.5 High 2026-08-11
CVE-2026-71965 usmannasir CyberPanel 输入验证错误漏洞 — cyberpanel 8.8 High 2026-08-10
CVE-2026-71576 Red Hat Multicluster Global Hub 输入验证错误漏洞 — Multicluster Global Hub 1.4.9 8.5 High 2026-08-10
CVE-2026-58262 Klever 输入验证错误漏洞 — klever-go 7.1 High 2026-08-07
CVE-2026-19127 Gitroom Postiz 输入验证错误漏洞 — postiz-app 6.5 Medium 2026-08-06
CVE-2026-19061 Insta InstaKNXServiceApp 输入验证错误漏洞 — InstaKNXServiceApp 3.7 Low 2026-08-06
CVE-2026-63687 Apache CXF JwtRequestCodeFilter静默覆盖PKCE和nonce参数漏洞 — Apache CXF - - 2026-08-06
CVE-2026-65583 Apache CXF 自颁发ID令牌声明验证跳过漏洞 — Apache CXF - - 2026-08-06

CWE-345（对数据真实性的验证不充分） 是常见的弱点类别，本平台收录该类弱点关联的 414 条 CVE 漏洞。