CWE-450: Multiple Interpretations of UI Input
Filter
The UI has multiple interpretations of user input but does not prompt the user when it selects the less secure interpretation.
What the weakness is: CWE-450 at MITRE. All weaknesses
Ask an AI about CWE-450
Show the prompt
Explain CWE-450: Multiple Interpretations of UI Input and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/450.html and https://cve.bz/cve/cwe/450?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 8.4CVE-2024-25858EPSS 0.2%
In Foxit PDF Reader before 2024.1 and PDF Editor before 2024.1, code execution via JavaScript could occur because of an unoptimized prompt message for users to review parameters of commands.
- 5.3CVE-2022-20863EPSS 0.9%
A vulnerability in the messaging interface of Cisco Webex App, formerly Webex Teams, could allow an unauthenticated, remote attacker to manipulate links or other content within the messaging interface. This vulnerability exists because the…
- 4.3CVE-2021-1242EPSS 1.4%
A vulnerability in Cisco Webex Teams could allow an unauthenticated, remote attacker to manipulate file names within the messaging interface. The vulnerability exists because the affected software mishandles character rendering. An attacke…