vulnerability-rating-taxonomy
vulnerability-rating-taxonomy copied to clipboard
Add variant
Currently, it appears that leaked PII is being categorized as Sensitive Data Exposure > Disclosure of Secrets > For Publicly Accessible Asset.
Would it make sense to have a Sensitive Data Exposure > PII to better describe the issue?