CVE-2022-28889
Clickjacking in the web console
概要
Clickjacking in the web console
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
In Apache Druid 0.22.1 and earlier, the server did not set appropriate headers to prevent clickjacking. Druid 0.23.0 and later prevent clickjacking using the Content-Security-Policy header.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web lists.apache.org