CVE-2022-28889
Clickjacking in the web console
Résumé
Clickjacking in the web console
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In Apache Druid 0.22.1 and earlier, the server did not set appropriate headers to prevent clickjacking. Druid 0.23.0 and later prevent clickjacking using the Content-Security-Policy header.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- web lists.apache.org