Back to CWE LookupView on MITRELanguages Platforms
CWE-306: Missing Authentication for Critical Function
BaseDraftExploit Likelihood: High
🏆 #21 in CWE Top 25 20241
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
Technical Details
- Structure
- Simple
Applicable To
Not Language-Specific
🏆 CWE Top 25 Historical Ranking
2023:#20
Score: 3.78
689 CVEs
2024:#21↓1
Score: 9.38
744 CVEs
Trend:Improving (moved up 1 ranks)