Inclusion of Web Functionality from an Untrusted Source

Properties

id: d3f:CWE-830

name
Inclusion of Web Functionality from an Untrusted Source
definition
The product includes web functionality (such as a web widget) from another domain, which causes it to operate within the domain of the product, potentially granting total access and control of the product to the untrusted source.
json

Neighbors

CWE-830 has no direct neighbors in this release.

Inferred Relationships

This page is experimental and may change significantly in future releases.

Related Countermeasure Techniques

No related defensive techniques in this release.

Related Weaknesses

Related Offensive Techniques

No related offensive techniques in this release.