Beveiligingsadvies

CVE-2021-3660

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-03-07 13:59:18

Laatst bijgewerkt 2024-08-03 17:01:08

Toegewezen door redhat

CVSS-score geen score

Status PUBLISHED

Beschrijving

Cockpit (and its plugins) do not seem to protect itself against clickjacking. It is possible to render a page from a cockpit server via another website, inside an <iFrame> HTML entry. This may be used by a malicious website in clickjacking or similar attacks.

← Alle CVE's bekijken Bekijk op cve.org ↗