Clickjacking

🗓️ 28 Oct 2022 01:24:07Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 14 Views

github.com/hashicorp/boundary is vulnerable to clickjacking. An attacker can redirect the user to malicious sites by intercepting login credentials, causing malicious actions on the site

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2022-36182	27 Oct 202216:28	–	circl
CNNVD	Hashicorp Boundary 安全漏洞	7 Oct 202200:00	–	cnnvd
CVE	CVE-2022-36182	27 Oct 202200:00	–	cve
Cvelist	CVE-2022-36182	27 Oct 202200:00	–	cvelist
EUVD	EUVD-2022-7186	3 Oct 202520:07	–	euvd
Github Security Blog	Hashicorp Boundary vulnerable to clickjacking	27 Oct 202219:00	–	github
NVD	CVE-2022-36182	27 Oct 202213:15	–	nvd
OSV	GHSA-XQV2-3VVQ-QG6R Hashicorp Boundary vulnerable to clickjacking	27 Oct 202219:00	–	osv
Prion	Design/Logic Flaw	27 Oct 202213:15	–	prion
Positive Technologies	PT-2022-23248 · Hashicorp · Hashicorp Boundary	27 Oct 202200:00	–	ptsecurity

Vulners

Node

hashicorp github.com/hashicorp/boundaryRangev0.5.0–0.5.0go

hashicorp github.com/hashicorp/boundaryRangesdk/v0.0.7–sdk/v0.0.22go

hashicorp github.com/hashicorp/boundaryRangeapi/v0.0.15–api/v0.0.29go

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/168654/Hashicorp-Boundary-Clickjacking.html
github	www.github.com/hashicorp/boundary/pull/2447
github	www.github.com/hashicorp/boundary/commit/54cdaaada84a9c26ab9db1fe89293b68330ee351
owasp	www.owasp.org/www-community/attacks/Clickjacking
github	www.github.com/advisories/GHSA-xqv2-3vvq-qg6r

31 Oct 2022 14:12Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.16.1

EPSS0.00202