CWE-293: Using Referer Field for Authentication
The referer field in HTTP requests can be easily modified and, as such, is not a valid means of message integrity checking.
Also known as referrer.
A kind of CWE-290 Authentication Bypass by Spoofing.
From the CWE List. © The MITRE Corporation.