CVE-2022-3260

2022-12-0800:00:00

CWE-1021

redhat

www.cve.org

response header

x-frame-options

clickjacking

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.4%

JSON

The response header has not enabled X-FRAME-OPTIONS, Which helps prevents against Clickjacking attack… Some browsers would interpret these results incorrectly, allowing clickjacking attacks.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Openshift",
    "versions": [
      {
        "version": "4.9",
        "status": "affected"
      }
    ]
  }
]

References

bugzilla.redhat.com/show_bug.cgi?id=2106780