CVE-2021-3660

Published March 10th, 2022

View on NVD ↗

CVSS v3

4.3

MEDIUM

CVSS v2

4.3

MEDIUM

Affected

PROJECT

Description

Cockpit (and its plugins) do not seem to protect itself against clickjacking. It is possible to render a page from a cockpit server via another website, inside an <iFrame> HTML entry. This may be used by a malicious website in clickjacking or similar attacks.

cockpit-project/cockpit

Cockpit is a web-based graphical interface for servers.

GitHub

14.2K