Lucene search

K

Popcorn94801EFD0B-404B-4670-961A-12A986252FA4

HistoryFeb 09, 2023 - 2:23 p.m.

Vulnerable to clickjacking

2023-02-0914:23:06

popcorn94

www.huntr.dev

9

clickjacking

missing security headers

firefox

iframe

bug bounty

0.001 Low

EPSS

Percentile

32.6%

Description

Vulnerable to clickjacking

Proof of Concept

Create an iframe.html with below contents

<!DOCTYPE html>

<html>

<body>

<h1>The iframe element</h1>

<iframe src=“https://localhost/Cockpit/” title=“iframe test”>
</iframe>

</body>

</html>
2) Open with firefox and note that the frame is loaded which is potential to clickjacking due to missing x-frame-options security headers

0.001 Low

EPSS

Percentile

32.6%

Related for 801EFD0B-404B-4670-961A-12A986252FA4

nvd1 prion1 veracode1 github1 osv2 cve1 cvelist1