Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-3660
4.3
MEDIUMCVSS v3
Published
March 10, 2022
CVSS v2
4.3 MEDIUM
Affected
4 projects
Assigned by
Red Hat
Severity scale
010
Description
Cockpit (and its plugins) do not seem to protect itself against clickjacking. It is possible to render a page from a cockpit server via another website, inside an <iFrame> HTML entry. This may be used by a malicious website in clickjacking or similar attacks.
agentejo/cockpit
GitHubAdd content management functionality to any site - plug & play / headless / api-first CMS
GitHubAdd content management functionality to any site - plug & play / headless / api-first CMS< 254NVD
cockpit
NPM
RubyGems