Labels

• External-Submission
• Feedback

  used to indicate feedback from the community on the GitHub Repository itself
• Phase01-Received

  The external submission has been received by the CWE team
• Phase02-Ack-Receipt

  The CWE team has acknowledged receipt of the submission by notifying the submitter
• Phase03-Init-Review

  The external submission has been assigned to a CWE analyst to review the initial submission
• Phase04-Init-Consult

  The external submission requires consultation between the original submitter and the CWE team
• Phase05-Init-Declined

  The initial external submission has been declined by the CWE team
• Phase06-Init-Accepted

  The initial external submission has been accepted by the CWE team
• Phase07-Det-Requested

  The CWE team has requested a detailed submission from the submitter
• Phase08-Det-Received

  The CWE team has received the submission details from the submitter
• Phase09-Det-Review

  A CWE analyst has begun review of the detailed submission
• Phase10-Det-Consult

  The detailed submission requires consultation between the submitter and the CWE team
• Phase11-Det-Accepted

  The detailed submission has been accepted by the CWE team
• Phase12-Internal-Update

  The internal CWE data representation is being updated with the detailed submission data.
• Phase13-CWE-Assigned

  The new CWE entry has been created and assigned
• Phase14-CWE-Modified

  Modification has been committed to internal repo
• Phase15-Final-Coordination

  Final coordination / review with the submitter is needed before publication
• Phase16-Published

  The submission has been published in a new CWE version
• Phase17-Post-Publication

  The submission has been published, but final messages need to go to the submitter
• Phase18-Closed

  the external submission is complete and closed with no more actions
• SCOPE.ADMINERR

  Submission Scope Problem: Admin/user error
• SCOPE.CONFLICT

  Submission Scope Problem: Conflict/contradiction with other weaknesses
• SCOPE.CUSTREL

  Submission Scope Problem: Not customer-relevant
• SCOPE.GROUPING

  Submission Scope Problem: Grouping of issues without a common behavior
• SCOPE.HUMANPROC

  Submission Scope Problem: Human/organizational process
• SCOPE.MOTIVE

  Submission Scope Problem: Motivation instead of mistake
• SCOPE.NOMITS

  Submission Scope Problem: No actionable mitigations
• SCOPE.NOSEC

  Submission Scope Problem: Not security-related
• SCOPE.NOTREAL

  Submission Scope Problem: Not a real-world issue
• SCOPE.SITUATIONS

  Submission Scope Problem: Focus on situations in which weaknesses may appear