目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

CWE-345 对数据真实性的验证不充分 类漏洞列表 414

CWE-345 对数据真实性的验证不充分 类弱点 414 条 CVE 漏洞汇总，含 AI 中文分析。

CWE-345 属于数据完整性与真实性验证不足的安全漏洞。攻击者通常通过伪造或篡改数据源，使系统误信无效或恶意信息，从而执行非预期操作或泄露敏感数据。开发者应实施严格的身份认证机制，如使用数字签名或加密哈希，确保数据来源可信且未被篡改，并在关键业务逻辑前强制进行真实性校验，以阻断恶意数据的注入与处理。

MITRE CWE 官方描述
CWE：CWE-345 数据真实性验证不足 (Insufficient Verification of Data Authenticity) 英文：产品未能以足以防止其接受无效数据的方式，充分验证数据的来源或真实性。
常见影响 (1)
Integrity, Other Varies by Context, Unexpected State
代码示例 (1)
In 2022, the OT:ICEFALL study examined products by 10 different Operational Technology (OT) vendors. The researchers reported 56 vulnerabilities and said that the products were "insecure by design" [REF-1283]. If exploited, these vulnerabilities often allowed adversaries to change how the products operated, ranging from denial of service to changing the code that the products executed. Since these…
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-49331 OpenShift oauth-proxy 输入验证错误漏洞 — Red Hat OpenShift Container Platform 4 6.5 Medium 2026-08-05
CVE-2026-67618 marimo 输入验证错误漏洞 — marimo 6.5 Medium 2026-08-04
CVE-2026-11836 CHIPS Alliance Core ROM 输入验证错误漏洞 — Core ROM 1.8 Low 2026-08-04
CVE-2026-68945 Angular 输入验证错误漏洞 — angular 8.8 High 2026-08-03
CVE-2026-18248 Fastify @fastify/aws-lambda 输入验证错误漏洞 — @fastify/aws-lambda 9.1 Critical 2026-08-03
CVE-2026-59641 Legion of the Bouncy Castle Inc BC-JAVA 输入验证错误漏洞 — BC-JAVA 8.7 High 2026-08-03
CVE-2026-67307 Wazuh 输入验证错误漏洞 — wazuh 6.3 Medium 2026-08-01
CVE-2026-28145 WordPress MasterStudy LMS 输入验证错误漏洞 — MasterStudy LMS 5.3 Medium 2026-07-31
CVE-2026-10079 Red Hat Advanced Cluster Security 输入验证错误漏洞 — Red Hat Advanced Cluster Security 4 8.5 High 2026-07-31
CVE-2026-62995 Authlib joserfc 输入验证错误漏洞 — joserfc 2.3 Low 2026-07-29
CVE-2026-59247 gleam 输入验证错误漏洞 — gleam 7.6 High 2026-07-29
CVE-2026-12383 Eda-server subject header未验证泄露 — Red Hat Ansible Automation Platform 2.5 for RHEL 8 7.5 High 2026-07-27
CVE-2026-13188 Progress Software Progress Telerik UI for AJAX 输入验证错误漏洞 — Telerik UI for ASP.NET AJAX 5.9 Medium 2026-07-22
CVE-2026-50248 NLnet Labs Unbound 输入验证错误漏洞 — Unbound 6.5 Medium 2026-07-22
CVE-2026-44690 NLnet Labs Unbound 输入验证错误漏洞 — Unbound 7.5 High 2026-07-22
CVE-2026-44584 Paymenter 输入验证错误漏洞 — Paymenter 4.3 Medium 2026-07-20
CVE-2026-49284 SimpleSAMLphp 输入验证错误漏洞 — simplesamlphp 7.1 High 2026-07-17
CVE-2026-54496 Zcash Foundation Zebra 输入验证错误漏洞 — zebra 9.3 Critical 2026-07-17
CVE-2026-49212 Symfony UX 输入验证错误漏洞 — ux - - 2026-07-17
CVE-2026-62215 OpenClaw 输入验证错误漏洞 — OpenClaw 8.0 High 2026-07-17
CVE-2026-44434 H2O quicly 输入验证错误漏洞 — quicly 5.3 Medium 2026-07-16
CVE-2026-33731 WWBN AVideo 输入验证错误漏洞 — AVideo 6.5 Medium 2026-07-16
CVE-2026-53536 Activepieces 输入验证错误漏洞 — activepieces - - 2026-07-16
CVE-2026-48799 gitroomhq postiz-app 输入验证错误漏洞 — postiz-app 7.7 High 2026-07-15
CVE-2026-48816 sigstore sigstore-js 输入验证错误漏洞 — sigstore-js 6.5 Medium 2026-07-14
CVE-2026-45069 Symfony 软件供应链问题漏洞 — symfony - - 2026-07-14
CVE-2026-11901 WordPress WP Hotel Booking 输入验证错误漏洞 — WP Hotel Booking 5.3 Medium 2026-07-11
CVE-2026-55883 Tilt Dev Tilt 输入验证错误漏洞 — tilt - - 2026-07-10
CVE-2026-53961 Discourse 输入验证错误漏洞 — discourse 6.5 Medium 2026-07-09
CVE-2026-54774 CoreWCF 输入验证错误漏洞 — CoreWCF 7.4 High 2026-07-08

CWE-345（对数据真实性的验证不充分） 是常见的弱点类别，本平台收录该类弱点关联的 414 条 CVE 漏洞。