CWE-830 - Inclusion of Web Functionality from an Untrusted Source

Description

The product includes web functionality (such as a web widget) from another domain, which causes it to operate within the domain of the product, potentially granting total access and control of the product to the untrusted source.

Latest vulnerabilities for CWE-830

No vulnerabilities found using your search criteria

References

Description of CWE-830 on Mitre website