CVE-2020-14194

CVE-2020-14194 affects Zulip Server prior to 2.1.5. The issue is a reverse tabnapping vulnerability triggered by a topic header link, enabling tabnabbing conditions in the Zulip web UI. Exploitation details are not provided beyond the reverse tabnapping description in the connected documents; no ...

CVE-2020-14194

Zulip Server before 2.1.5 allows reverse tabnapping via a topic header link...

CVE-2020-14194

Zulip Server before 2.1.5 allows reverse tabnapping via a topic header link...

PT-2020-13923

Name of the Vulnerable Software and Affected Versions Zulip Server versions prior to 2.1.5 Description The issue allows reverse tabnapping via a topic header link. Recommendations For versions prior to 2.1.5, update to version 2.1.5 or later to resolve the issue...

CVE-2020-14194: Improper Privilege Management

Zulip Server before 2.1.5 allows reverse tabnapping via a topic header link...

Reverse Tabnapping

swagger-ui is vulnerable to reverse tabnabbing. The anchor tags uses target='blank' which would allow attackers to access window.opener for the original page to perform phising attacks...

Reverse Tabnapping in swagger-ui

Versions of swagger-ui prior to 3.18.0 are vulnerable to Reverse Tabnapping. The package uses target='blank' in anchor tags, allowing attackers to access window.opener for the original page. This is commonly used for phishing attacks. Recommendation Upgrade to version 3.18.0 or later...

GHSA-X9P2-FXQ6-2M5F Reverse Tabnapping in swagger-ui

Versions of swagger-ui prior to 3.18.0 are vulnerable to Reverse Tabnapping. The package uses target='blank' in anchor tags, allowing attackers to access window.opener for the original page. This is commonly used for phishing attacks. Recommendation Upgrade to version 3.18.0 or later...

Reverse Tabnapping

Overview Versions of swagger-ui prior to 3.18.0 are vulnerable to Reverse Tabnapping. The package uses target='blank' in anchor tags, allowing attackers to access window.opener for the original page. This is commonly used for phishing attacks. Recommendation Upgrade to version 3.18.0 or later...

Tabnapping Phishing Proof Of Concept

I just stumbled across this credit goes to http://www.pjlantz.com/2010/05/tabnapping.html and Aza Raskin and while rough, certainly has potential given the right circumstances. I added a quick PoC, though I'm on a NAT and can't provide you a working link atm, though it seemed to work fine using t...