Base weakness
Incomplete
CWE-1021: Improper Restriction of Rendered UI Layers or Frames
Also known as: Clickjacking, UI Redress Attack, Tapjacking
The web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain.
175
Recorded CVEs
With this primary weakness
0
KEVs
In the CISA KEV catalog
Not rated
Likelihood of exploit
Per MITRE
Base
Abstraction
MITRE classification
Overview
CWE-1021 (Improper Restriction of Rendered UI Layers or Frames) is a base-level software weakness catalogued by MITRE in the Common Weakness Enumeration (CWE). It describes a recurring type of mistake that can lead to exploitable security vulnerabilities.