{
  "id": "cwe_id",
  "kind": "datatype",
  "status": "draft",
  "name": "CWE identifier",
  "doc": "Identifier of an entry in MITRE's Common Weakness Enumeration (CWE), the catalog of software and hardware weakness types: CWE- followed by a number without leading zeros. CVE records and security advisories use it to name the root cause of a vulnerability, for example CWE-79 for cross-site scripting. Wikidata stores the number without the CWE- prefix.",
  "is_pii": false,
  "categories": [
    "software"
  ],
  "langs": [
    "common"
  ],
  "classification": "identifier",
  "regexp": "^CWE-[1-9][0-9]*$",
  "examples": [
    {
      "value": "CWE-79",
      "description": "Improper Neutralization of Input During Web Page Generation (cross-site scripting)",
      "valid": true
    },
    {
      "value": "CWE-89",
      "description": "Improper Neutralization of Special Elements used in an SQL Command (SQL injection)",
      "valid": true
    },
    {
      "value": "CWE-079",
      "description": "Leading zero",
      "valid": false
    }
  ],
  "mappings": {
    "wikidata": "P3624"
  },
  "links": [
    {
      "type": "wikipedia",
      "url": "https://en.wikipedia.org/wiki/Common_Weakness_Enumeration"
    },
    {
      "type": "doc",
      "url": "https://cwe.mitre.org/data/definitions/79.html"
    },
    {
      "type": "doc",
      "url": "https://github.com/CVEProject/cve-schema/blob/main/schema/CVE_Record_Format.json"
    }
  ],
  "quality": {
    "score": 85,
    "missing": [
      "translation",
      "detector coverage"
    ]
  },
  "source": {
    "path": "data/datatypes/any/software/cwe_id.yaml",
    "url": "https://github.com/apicrafter/metacrafter-registry/blob/main/data/datatypes/any/software/cwe_id.yaml",
    "edit_url": "https://github.com/apicrafter/metacrafter-registry/edit/main/data/datatypes/any/software/cwe_id.yaml"
  },
  "urls": {
    "html": "http://registry.apicrafter.io/datatype/cwe_id",
    "json": "http://registry.apicrafter.io/api/v1/datatypes/cwe_id.json"
  }
}