CVE-2022-32517CWE-1021

A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause an adversary to trick the interface user/admin into…

Medium · published January 30, 2023

CVSS v3.1
6.5
EPSS
0%
Percentile
36.7
In the wild
Unconfirmed
What it is

A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause an adversary to trick the interface user/admin into interacting with the application in an unintended way when the product does not implement restrictions on the ability to render within frames on external addresses. Affected Products: Conext™ ComBox (All Versions)

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00434 · 36.7th percentile
Weakness
CWE-1021 · Improper Restriction of Rendered UI Layers or Frames
Published
2023-01-30T00:00Z
EPSS history
Timeline
  • 30 JAN 00:00Z
    A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause an adversary to trick the interface user/admin into…
    cvelistv5