Variant weakness
Draft
CWE-293: Using Referer Field for Authentication
Also known as: referrer
The referer field in HTTP requests can be easily modified and, as such, is not a valid means of message integrity checking.
1
Recorded CVEs
With this primary weakness
0
KEVs
In the CISA KEV catalog
High
Likelihood of exploit
Per MITRE
Variant
Abstraction
MITRE classification
Overview
CWE-293 (Using Referer Field for Authentication) is a variant-level software weakness catalogued by MITRE in the Common Weakness Enumeration (CWE). It describes a recurring type of mistake that can lead to exploitable security vulnerabilities.