CVE-2021-46708

Katalog CVE

CVSS 6.1 · Medium EPSS 1,5%

Kerentanan Improper Restriction of Rendered UI Layers or Frames pada smartbear swagger-ui-dist. Skor CVSS 3.1 6.1 (Medium) menurut NVD.

Deskripsi (NVD)

The swagger-ui-dist package before 4.1.3 for Node.js could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.

Rincian

Terbit di NVD

11 Maret 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.1 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1021: Improper Restriction of Rendered UI Layers or Frames

EPSS (30 hari)

1,5% peluang dieksploitasi; lebih tinggi dari 73,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://security.snyk.io/vuln/SNYK-JS-SWAGGERUIDIST-2314884 patch · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20220407-0004/ advisory pihak ketiga
• https://www.npmjs.com/package/swagger-ui-dist/v/4.1.3 product · advisory pihak ketiga