CWE-448 (UI上的废弃特性) — Vulnerability Class 2

CWE-448 represents a user interface weakness where obsolete features remain accessible without adequate warnings, creating confusion or unintended actions. This vulnerability is typically exploited when users inadvertently interact with deprecated functions, leading to data loss, security misconfigurations, or system instability, as they assume the interface reflects current capabilities. Attackers may leverage this ambiguity to trick users into performing malicious operations or bypassing intended security controls by exploiting the lack of clear feedback. Developers avoid this weakness by rigorously auditing user interfaces to identify and remove deprecated elements, ensuring that any remaining obsolete features are clearly marked, disabled, or accompanied by explicit warnings. By maintaining a clean, up-to-date interface and implementing strict version control for UI components, organizations can prevent user confusion and mitigate the risks associated with lingering, unmonitored functionality.