PT-2020-13923

Name of the Vulnerable Software and Affected Versions Zulip Server versions prior to 2.1.5 Description The issue allows reverse tabnapping via a topic header link. Recommendations For versions prior to 2.1.5, update to version 2.1.5 or later to resolve the issue...

Reverse Tabnapping

swagger-ui is vulnerable to reverse tabnabbing. The anchor tags uses target='blank' which would allow attackers to access window.opener for the original page to perform phising attacks...

Reverse Tabnapping in swagger-ui

Versions of swagger-ui prior to 3.18.0 are vulnerable to Reverse Tabnapping. The package uses target='blank' in anchor tags, allowing attackers to access window.opener for the original page. This is commonly used for phishing attacks. Recommendation Upgrade to version 3.18.0 or later...

GHSA-X9P2-FXQ6-2M5F Reverse Tabnapping in swagger-ui

Versions of swagger-ui prior to 3.18.0 are vulnerable to Reverse Tabnapping. The package uses target='blank' in anchor tags, allowing attackers to access window.opener for the original page. This is commonly used for phishing attacks. Recommendation Upgrade to version 3.18.0 or later...

Reverse Tabnapping

Overview Versions of swagger-ui prior to 3.18.0 are vulnerable to Reverse Tabnapping. The package uses target='blank' in anchor tags, allowing attackers to access window.opener for the original page. This is commonly used for phishing attacks. Recommendation Upgrade to version 3.18.0 or later...