CWEs

- addresses parts of #779
- correct links as suggested by @sthagen

csaf_2.1/prose/edit/src/tests-02-optional.md

@@ -795,7 +795,7 @@ The relevant path for this test is:
       ]
 ```
 
-> The usage of CWE-20 is discouraged as "is commonly misused in low-information vulnerability reports when lower-level CWEs could be used instead, or when more details about the vulnerability are available". [cite](https://cwe.mitre.org/data/definitions/20.html)
+> The usage of CWE-20 is discouraged as "is commonly misused in low-information vulnerability reports when lower-level CWEs could be used instead, or when more details about the vulnerability are available". [cite](https://cwe.mitre.org/data/definitions/20.html#Vulnerability_Mapping_Notes_20)
 
 ### Usage of CWE Allowed with Review for Vulnerability Mapping
 
@@ -822,4 +822,4 @@ The relevant path for this test is:
       ]
 ```
 
-> The usage of CWE-1023 is allowed with review as the "CWE entry is a Class and might have Base-level children that would be more appropriate". [cite](https://cwe.mitre.org/data/definitions/1023.html)
+> The usage of CWE-1023 is allowed with review as the "CWE entry is a Class and might have Base-level children that would be more appropriate". [cite](https://cwe.mitre.org/data/definitions/1023.html#Vulnerability_Mapping_Notes_1023)