CWE-451User Interface (UI) Misrepresentation of Critical Information

Description

The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.

Common consequences

• Non-Repudiation,Access Control→Hide Activities,Bypass Protection Mechanism,Varies by Context
  [object Object]

Potential mitigations

• Implementation
  Perform data validation (e.g. syntax, length, etc.) before interpreting the data.
• Architecture and Design
  Create a strategy for presenting information, and plan for how to display unusual characters.

Related CWEs

Recent CVEs classified under this CWE