Skip to content
Sign in
Not rated

CVE-2021-3660 Cockpit (and its plugins) do not seem to protect itself against clickjacking

Description

Cockpit (and its plugins) do not seem to protect itself against clickjacking. It is possible to render a page from a cockpit server via another website, inside an <iFrame> HTML entry. This may be used by a malicious website in clickjacking or similar attacks.

Affected products and versions

Product Affected versions Fixed in
cockpit Versions not published

Other CVEs of cockpit

The 3 CVEs of cockpit →
CVE-2025-7053 A vulnerability was found in Cockpit up to 2.11.3 5.1 Medium CVE-2021-3698 A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate verification performed by the… Not rated
Track this CVE