Use of Web Link to Untrusted Target with window.opener Access

Properties

id: d3f:CWE-1022

name
Use of Web Link to Untrusted Target with window.opener Access
definition
The web application produces links to untrusted external sites outside of its sphere of control, but it does not properly prevent the external site from modifying security-critical properties of the window.opener object, such as the location property.
synonyms
tabnabbing
json

Neighbors

CWE-1022 has no direct neighbors in this release.

Inferred Relationships

This page is experimental and may change significantly in future releases.

Related Countermeasure Techniques

No related defensive techniques in this release.

Related Weaknesses

Related Offensive Techniques

No related offensive techniques in this release.