Skip to content
OpenAdvisories

Weakness (CWE)

CWE-356: Missing User Interaction for Potentially Unsafe Action

Base Incomplete

The product encounters a situation in which some
of its behavior is security-critical and should be authorized
by a human before progressing, but it does not properly
consult with the human user or its proxy (such as UI approval
dialogues or pre-set policies) to determine whether it is
allowed to perform the potentially dangerous
behavior.

How to prevent it (1 mitigation)

  1. Architecture and Design

    Product systems should warn users that a potentially dangerous action may occur if the user proceeds. For example, if the user downloads a file from an unknown source and attempts to execute the file on their machine, then the application's GUI can indicate that the file is unsafe.

Source: MITRE CWE-356

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.1
    CVE-2024-4187

    Stored XSS vulnerability has been discovered in OpenText™ Filr. The vulnerability could cause users to not be warned when clicking links to external sites.

    Stored XSS vulnerability has been discovered in OpenText™ Filr product, affecting versions 24.1.1 and 24.2. The vulnerability could cause users to not be warned when clicking links to external sites.

    OpenText Filr