Skip to content
OpenAdvisories

Weakness (CWE)

CWE-451: User Interface (UI) Misrepresentation of Critical Information

Class Draft

The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.

How to prevent it (2 mitigations)

  1. Implementation

    Perform data validation (e.g. syntax, length, etc.) before interpreting the data.

  2. Architecture and Design

    Create a strategy for presenting information, and plan for how to display unusual characters.

Source: MITRE CWE-451

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-11107 Public exploit

    Inappropriate implementation in Downloads in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform …

    Google Chrome chromium Browsers Debian
  • Medium 4.9
    CVE-2024-55889 Public exploit

    phpMyFAQ Vulnerable to Unintended File Download Triggered by Embedded Frames

    phpMyFAQ is an open source FAQ web application. Prior to version 3.2.10, a vulnerability exists in the FAQ Record component where a privileged attacker can trigger a file download on a victim's machine upon page visit by embedding it in an <iframe> element wi…

    thorsten phpMyFAQ thorsten/phpmyfaq Packagist