OWASPASVS 5.0 requirement
ASVS-V15.1.1 Application documentation defines risk based remediation time frames for 3rd party component versions with vulnerabilities and for updating…
- Standard
- OWASP ASVS 5.0
- Chapter
- V15 Secure Coding and Architecture
- Section
- V15.1 Secure Coding and Architecture Documentation
- Level
- L1 (requirement applies from this verification level up)
Requirement
Verify that application documentation defines risk based remediation time frames for 3rd party component versions with vulnerabilities and for updating libraries in general, to minimize the risk from these components.