1865
Reference Description
CVE-2022-4927 Library software does not use rel: "noopener noreferrer" setting, allowing
tabnabbing attacks to redirect to a malicious page
https://www.cve.org/CVERecord?id=CVE-2022-4927
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1396 Comprehensive Categorization: Access Control 1400 2519
References
[REF-39]Alex Yumashev. "Target="_blank" - the most underestimated vulnerability ever".
2016 May 4. < https://medium.com/@jitbit/target-blank-the-most-underestimated-vulnerabilityever-
96e328301f4c >.
[REF-40]Ben Halpern. "The target="_blank" vulnerability by example". 2016 September 1. < https://
dev.to/ben/the-targetblank-vulnerability-by-example >.
[REF-958]Mathias Bynens. "About rel=noopener". 2016 March 5. < https://mathiasbynens.github.io/
rel-noopener/ >.
CWE-1023: Incomplete Comparison with Missing Factors
Weakness ID : 1023
Structure : Simple
Abstraction : Class
Description
The product performs a comparison between entities that must consider multiple factors or
characteristics of each entity, but the comparison does not include one or more of these factors.
Extended Description
An incomplete comparison can lead to resultant weaknesses, e.g., by operating on the wrong
object or making a security decision without considering a required factor.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 697 Incorrect Comparison 1530
ParentOf 184 Incomplete List of Disallowed Inputs 459
ParentOf 187 Partial String Comparison 467
ParentOf 478 Missing Default Case in Multiple Condition Expression 1142
ParentOf 839 Numeric Range Comparison Without Minimum Check 1767
Weakness Ordinalities
Primary :
Applicable Platforms
CWE Version 4.14
CWE-1023: Incomplete Comparison with Missing Factors
CWE-1023: Incomplete Comparison with Missing Factors