Skip to content
OpenAdvisories

Weakness (CWE)

CWE-451: User Interface (UI) Misrepresentation of Critical Information

Class Draft

The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.

How to prevent it (2 mitigations)

  1. Implementation

    Perform data validation (e.g. syntax, length, etc.) before interpreting the data.

  2. Architecture and Design

    Create a strategy for presenting information, and plan for how to display unusual characters.

Source: MITRE CWE-451

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed