CVE-2025-27455CWE-1021

CVE-2025-27455

Medium · published July 3, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
26.4
In the wild
Unconfirmed
What it is

The web application is vulnerable to clickjacking attacks. The site can be embedded into another frame, allowing an attacker to trick a user into clicking on something different from what the user perceives, thus potentially revealing confidential information or allowing others to take control of their computer while clicking on seemingly innocuous objects.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00341 · 26.4th percentile
Weakness
CWE-1021 · Improper Restriction of Rendered UI Layers or Frames
Published
2025-07-03T11:30Z
EPSS history
Timeline
  • 03 JUL 11:30Z
    CVE-2025-27455
    cvelistv5