1842
ParentOf 1385 Missing Origin Validation in WebSockets 2259
PeerOf 451 User Interface (UI) Misrepresentation of Critical Information 1079
Relevant to the view "Weaknesses for Simplified Mapping of Published
Vulnerabilities" (CWE-1003)
Nature Type ID Name Page
ChildOf 345 Insufficient Verification of Data Authenticity 851
Relevant to the view "Architectural Concepts" (CWE-1008)
Nature Type ID Name Page
MemberOf 1014 Identify Actors 2429
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 1214 Data Integrity Issues 2477
MemberOf 417 Communication Channel Errors 2325
Weakness Ordinalities
Primary :
Resultant :
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Access Control
Other
Gain Privileges or Assume Identity
Varies by Context
An attacker can access any functionality that is
inadvertently accessible to the source.
Demonstrative Examples
Example 1:
This Android application will remove a user account when it receives an intent to do so:
CWE Version 4.14
CWE-346: Origin Validation Error
CWE-346: Origin Validation Error