Lucene search

K
osvGoogleOSV:GHSA-G4GG-9F62-JFPH
HistoryOct 18, 2018 - 5:41 p.m.

OrientDB Studio web management interface is vulnerable to clickjacking attacks

2018-10-1817:41:40
Google
osv.dev
11

AI Score

6.4

Confidence

High

EPSS

0.002

Percentile

61.5%

The Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.

AI Score

6.4

Confidence

High

EPSS

0.002

Percentile

61.5%

Related for OSV:GHSA-G4GG-9F62-JFPH