Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2021-3731

Improper Restriction of Rendered UI Layers or Frames in ledgersmb/ledgersmb

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
@huntrdev

Description

LedgerSMB does not sufficiently guard against being wrapped by other sites, making it vulnerable to 'clickjacking'. This allows an attacker to trick a targetted user to execute unintended actions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ledgersmb ledgersmb/ledgersmb

  • 1.7.33unaffected
  • unspecified to < 1.8.18affected

References