CWE-1007: Homograph Attack
The product displays information or identifiers to a user, but the display mechanism does not make it easy for the user to distinguish between visually similar or identical glyphs (homoglyphs), which may cause the user to misinterpret a glyph and perform an unintended, insecure action.
Also known as Insufficient Visual Distinction of Homoglyphs Presented to User.
A kind of CWE-451 User Interface (UI) Misrepresentation of Critical Information.
From the CWE List. © The MITRE Corporation.
Newest
- sensiolabs symfony, symfony html-sanitizer +1 more Symfony: HtmlSanitizer URL Parser Deny Gates Underinclusive: Percent-Encoded BiDi Marks and Unicode Whitespace Bypass Visual-Spoofing Defense 5.3 Medium
- sensiolabs symfony, symfony html-sanitizer +1 more Symfony: HtmlSanitizer URL Attributes Pass Through BiDi Override Characters → Visual href Spoofing 2.3 Low
- cryptocoinjs base-x base-x homograph attack allows Unicode lookalike characters to bypass validation. 8.7 High
- google chrome Inappropriate implementation in Browser UI in Google Chrome on Android prior to 133.0.6943.98... 5.4 Medium
- mozilla firefox If a domain name contained a RTL character, it would cause the domain to be rendered to the right... 4.3 Medium
- unicode An issue was discovered in the character definitions of the Unicode Specification through 14.0.... 8.3 High