CWE-451

User Interface (UI) Misrepresentation of Critical Information

Medium

Description

The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.

Potential Impact

How to Fix

Implementation

Perform data validation (e.g. syntax, length, etc.) before interpreting the data.

Architecture and Design

Create a strategy for presenting information, and plan for how to display unusual characters.

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-451 vulnerabilities in your codebase.

Get Security Assessment