CWE Definition / CWE-1470

CWE-1470: Improper External Identity Verification

The product supports user accounts that include a user's external identifier or communications channel - such as email, phone number, social media account, or domain name - but it does not properly verify that the user actually controls the associated identifier or channel.