Weakness (CWE)

CWE-830: Inclusion of Web Functionality from an Untrusted Source

Variant Incomplete

The product includes web functionality (such as a web widget) from another domain in a way that causes the functionality to operate within the domain of the product, potentially granting total access and control of the product to the untrusted source.

Source: MITRE CWE-830

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.