CVE-2022-3167

High

Improper Restriction of Rendered UI Layers or Frames in GitHub repository ikus060/rdiffweb prior to 2.4.1.

@huntrdev·CWE-1021·Published 2022-09-08

CVSS

8.8

EPSS

0.01

KEV

Exploits

cve.orgen

106 chars

Improper Restriction of Rendered UI Layers or Frames in GitHub repository ikus060/rdiffweb prior to 2.4.1.

NVDen

106 chars

Improper Restriction of Rendered UI Layers or Frames in GitHub repository ikus060/rdiffweb prior to 2.4.1.

OSV.deven

106 chars

Improper Restriction of Rendered UI Layers or Frames in GitHub repository ikus060/rdiffweb prior to 2.4.1.

GHSAen

334 chars

rdiffweb prior to 2.4.1 is vulnerable to Improper Restriction of Rendered UI Layers or Frames. This allows attackers to perform clickjacking attacks that can trick victims into performing actions such as entering passwords, liking or deleting posts, and/or initiating an account deletion. This issue has been patched in version 2.4.1.

NVDes

155 chars

Una Restricción Inapropiada de Marcos o Capas de Interfaz de Usuario Renderizados en el repositorio de GitHub ikus060/rdiffweb versiones anteriores a 2.4.1

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.0	Primary	cve.org	10.0	—	—	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
3.0	Primary	cve.org	10.0	—	—	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H