data/reports: set better CWE for GO-2025-3420
This report was assigned CWE-116 ("Improper Encoding or Escaping of Output"),
but CWE-201 ("Insertion of Sensitive Information Into Sent Data") better
describes the incorrect behavior of sending a cookie or Authorization header
when the header should have been stripped.
Change-Id: I8d3266c7348d3ed9d60d903b7a7afb39bdee212b
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/704036
Auto-Submit: Damien Neil <dneil@google.com>
Reviewed-by: Neal Patel <nealpatel@google.com>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
This repository contains the infrastructure and internal reports to create the Go Vulnerability Database.
Check out https://go.dev/security/vuln for more information about the Go vulnerability management system.
Click here to report a public vulnerability in the Go ecosystem, or give feedback about the project.
The privacy policy for govulncheck can be found at https://vuln.go.dev/privacy.
Unless otherwise noted, the Go source files are distributed under the BSD-style license found in the LICENSE file.
Database entries are distributed under the terms of the CC-BY-4.0 license. See go.dev/security/vuln/database for information on how to access these entries.