CVE-2025-49192CWE-1021

Clickjacking

Medium · published June 12, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
24.3
In the wild
Unconfirmed
What it is

The web application is vulnerable to clickjacking attacks. The site can be embedded into another frame, allowing an attacker to trick a user into clicking on something different from what the user perceives. This could potentially reveal confidential information or allow others to take control of their computer while clicking on seemingly innocuous objects.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00325 · 24.3th percentile
Weakness
CWE-1021 · Improper Restriction of Rendered UI Layers or Frames
Published
2025-06-12T14:12Z
EPSS history
Timeline
  • 12 JUN 14:12Z
    Clickjacking
    cvelistv5