Common Weakness Enumeration

    CWE Definition / CWE-1385

    CWE-1385: Missing Origin Validation in WebSockets

    The product uses a WebSocket, but it does not properly verify that the source of data or communication is valid.

    Published:28 May 2021
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-346: Origin Validation Error