cockpit-hq is vulnerable to Clickjacking. The vulnerability exists due to the lack of the x-frame-options
header in admin.php
which allows an attacker to misdirect the user, making them click something unintentionally.
CPE | Name | Operator | Version |
---|---|---|---|
cockpit-hq | le | 2.3.8 | |
cockpit-hq | le | 2.3.8 |