Skip to content
OpenAdvisories

Weakness (CWE)

CWE-356: Missing User Interaction for Potentially Unsafe Action

Base Incomplete

The product encounters a situation in which some
of its behavior is security-critical and should be authorized
by a human before progressing, but it does not properly
consult with the human user or its proxy (such as UI approval
dialogues or pre-set policies) to determine whether it is
allowed to perform the potentially dangerous
behavior.

How to prevent it (1 mitigation)

  1. Architecture and Design

    Product systems should warn users that a potentially dangerous action may occur if the user proceeds. For example, if the user downloads a file from an unknown source and attempts to execute the file on their machine, then the application's GUI can indicate that the file is unsafe.

Source: MITRE CWE-356

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed