Common Weakness Enumeration
CWE-357 Insufficient UI Warning of Dangerous Operations
Description
The user interface provides a warning to a user regarding dangerous or sensitive operations, but the warning is not noticeable enough to warrant attention.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-357 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-c32m-27pj-4xcj | CVE-2025-49582 | HIGH |
XWiki's required right warnings for macros are incomplete |
2025-11-04 | |
| GHSA-59w6-r9hm-439h | CVE-2025-49585 | HIGH |
XWiki does not require right warnings for XClass definitions |
2025-06-13 | |
| GHSA-j7p2-87q3-44w7 | CVE-2025-49587 | MODERATE |
XWiki does not require right warnings for notification displayer objects |
2025-06-13 | |
| GHSA-ff6v-w58f-v97w | CVE-2025-49583 | MODERATE |
XWiki provides no warning when granting XWiki.Notifications.Code.NotificationEmailRendererClass admin right |
2025-06-13 |