HIGH 8.8 PyPI
rdiffweb vulnerable to Improper Restriction of Rendered UI Layers or Frames
GHSA-m379-x4xc-38x9 · CVE-2022-3167 · PYSEC-2022-268
Published · Modified
Description
rdiffweb prior to 2.4.1 is vulnerable to Improper Restriction of Rendered UI Layers or Frames. This allows attackers to perform clickjacking attacks that can trick victims into performing actions such as entering passwords, liking or deleting posts, and/or initiating an account deletion. This issue has been patched in version 2.4.1.
References
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2022-3167
- WEB https://github.com/ikus060/rdiffweb/commit/7294bb7466532762c93d711211e5958940c1b428
- ADVISORY https://github.com/advisories/GHSA-m379-x4xc-38x9
- PACKAGE https://github.com/ikus060/rdiffweb
- WEB https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-268.yaml
- WEB https://huntr.dev/bounties/e5c2625b-34cc-4805-8223-80f2689e4e5c
Ready to move
Start Securing
Free, no credit card | First findings in minutes