Non notée
CVE-2021-3660 Cockpit (and its plugins) do not seem to protect itself against clickjacking
Description
Cockpit (and its plugins) do not seem to protect itself against clickjacking. It is possible to render a page from a cockpit server via another website, inside an <iFrame> HTML entry. This may be used by a malicious website in clickjacking or similar attacks.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| cockpit | Versions non publiées |