CWE-451User Interface (UI) Misrepresentation of Critical Information

Description

The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.

[object Object]

Common consequences

• Non-Repudiation,Access Control→Hide Activities,Bypass Protection Mechanism

Potential mitigations

• Implementation
  Perform data validation (e.g. syntax, length, etc.) before interpreting the data.
• Architecture and Design
  Create a strategy for presenting information, and plan for how to display unusual characters.

Related CWEs

Recent CVEs classified under this CWE