Common Weakness Enumeration

    CWE Definition / CWE-1021

    CWE-1021: Improper Restriction of Rendered UI Layers or Frames

    The web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain.

    Published:1 Aug 2017
    Organization:MITRE
    Modified:30 Apr 2026

    Related Weakness

    CWE-441: Unintended Proxy or Intermediary ('Confused Deputy')

    CWE-610: Externally Controlled Reference to a Resource in Another Sphere

    CWE-451: User Interface (UI) Misrepresentation of Critical Information