Lucene search

K
cvelistRedhatCVELIST:CVE-2021-3660
HistoryMar 07, 2022 - 1:59 p.m.

CVE-2021-3660

2022-03-0713:59:18
CWE-1021
redhat
raw.githubusercontent.com
1

6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

30.1%

Cockpit (and its plugins) do not seem to protect itself against clickjacking. It is possible to render a page from a cockpit server via another website, inside an <iFrame> HTML entry. This may be used by a malicious website in clickjacking or similar attacks.