CWE-451 User Interface (UI) Misrepresentation of Critical Information
Description
The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-451 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-xv5w-cw7x-72gj | CVE-2026-35371 | LOW | - |
id: pretty-print uses effective GID instead of effective UID for name lookup |
2026-07-06 |
| GHSA-53gr-wmf4-8hh3 | - | LOW | - |
Duplicate Advisory: uutils coreutils's User Interface (UI) Misrepresents Critical Information |
2026-07-06 |
| GHSA-v3wm-qf9p-c549 | CVE-2026-48760 | MODERATE | - |
Symfony: HtmlSanitizer URL Parser Deny Gates Underinclusive: Percent-Encoded BiDi Marks and Unicode Whitespace Bypass Visual-Spoofing Defense |
2026-06-15 |
| GHSA-h5vq-qfcg-4m6p | CVE-2026-45064 | MODERATE | - |
Symfony's HtmlSanitizer URL Attributes Pass Through BiDi Override Characters → Visual href Spoofing |
2026-05-27 |
| GHSA-w8rf-7qf8-65ww | - | HIGH |
Duplicate Advisory: OpenClaw: Node-host approvals could show misleading shell payloads instead of the executed argv |
2026-04-06 | |
| GHSA-7q2j-c4q5-rm27 | CVE-2026-26320 | HIGH |
OpenClaw macOS deep link confirmation truncation can conceal executed agent message |
2026-02-20 | |
| GHSA-h89p-5896-f4q8 | CVE-2025-13082 | LOW | - |
Drupal core allows Content Spoofing |
2025-11-18 |
| GHSA-r6f3-55wj-g9p3 | CVE-2024-6429 | MODERATE |
WSO2 Identity Server Apps allows content spoofing in logs |
2025-09-27 | |
| GHSA-m3r7-8gw7-qwvc | CVE-2024-55889 | MODERATE | - |
thorsten/phpmyfaq Unintended File Download Triggered by Embedded Frames |
2025-08-14 |
| GHSA-cmm8-gw4m-26cw | CVE-2025-43712 | LOW |
Withdrawn Advisory: JHipster allows privilege escalation via a modified authorities parameter |
2025-08-04 | |
| GHSA-fmvm-x8mv-47mj | CVE-2022-23646 | MODERATE |
Improper CSP in Image Optimization API for Next.js versions between 10.0.0 and 12.1.0 |
2022-02-23 |