rdiffweb vulnerable to Improper Restriction of Rendered UI Layers or Frames
rdiffweb prior to 2.4.1 is vulnerable to Improper Restriction of Rendered UI Layers or Frames. This allows attackers to perform clickjacking attacks that can trick victims into performing actions such as entering passwords, liking or deleting posts, and/or initiating an account deletion. This issue has been patched in version 2.4.1.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-3167US | high8.8 | — | ||
Improper Restriction of Rendered UI Layers or Frames in GitHub repository ikus060/rdiffweb prior to 2.4.1. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/advisories/GHSA-m379-x4xc-38x9ADVISORY
- https://github.com/ikus060/rdiffwebPACKAGE
- https://github.com/ikus060/rdiffweb/commit/7294bb7466532762c93d711211e5958940c1b428WEB
- https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-268.yamlWEB
- https://huntr.dev/bounties/e5c2625b-34cc-4805-8223-80f2689e4e5cWEB
- https://nvd.nist.gov/vuln/detail/CVE-2022-3167ADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan