MEDIUM6.1

GHSA-xqv2-3vvq-qg6r

Hashicorp Boundary vulnerable to clickjacking

Details

Hashicorp Boundary is vulnerable to Clickjacking which allow for the interception of login credentials, re-direction of users to malicious sites, or causing users to perform malicious actions on the site.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/hashicorp/boundary

Introduced in: 0

No fixed version published yet for github.com/hashicorp/boundary (go modules). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2022-36182[ADVISORY]
https://github.com/hashicorp/boundary[PACKAGE]
https://owasp.org/www-community/attacks/Clickjacking[WEB]
https://packetstormsecurity.com/files/168654/Hashicorp-Boundary-Clickjacking.html[WEB]