patch-10
Ritik Chaddha 2023-06-02 23:48:50 +05:30 committed by GitHub
parent c95a64a9e0
commit 50c1b85db4
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 6 deletions

View File

@ -6,15 +6,15 @@ info:
severity: medium
description: |
This template checks for the presence of clickjacking prevention headers in the HTTP response, aiming to identify vulnerabilities related to the improper restriction of rendered UI layers or frames in the GitHub repository unilogies/bumsys prior to version 2.0.2.
reference:
reference:
- https://nvd.nist.gov/vuln/detail/CVE-2023-1362
- https://huntr.dev/bounties/e5959166-c8ef-4ada-9bb1-0ff5a9693bac/
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
cvss-score: 6.1
cve-id: CVE-2023-1362
cwe-id: CWE-1021
cpe: cpe:2.3:a:bumsys_project:bumsys:*:*:*:*:*:*:*:*
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
cvss-score: 6.1
cve-id: CVE-2023-1362
cwe-id: CWE-1021
cpe: cpe:2.3:a:bumsys_project:bumsys:*:*:*:*:*:*:*:*
metadata:
max-request: 1
verified: "true"