Hashicorp Boundary vulnerable to clickjacking

MOYENNE 6.1CVE-2022-36182 · GHSA-xqv2-3vvq-qg6r · Published 27/10/2022 · updated 17/06/2026

En bref

CVE-2022-36182 est une vulnérabilité MOYENNE (CVSS 6.1) touchant github.com/hashicorp/boundary, boundary (hashicorp).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.70%, plus élevée que 53.2% des vulnérabilités.
Correctif : mettre à jour vers 0.11.0 ou plus récent.

Package	Affected versions	Patched versions
github.com/hashicorp/boundary Go	`≤ 0.11.0`	No fix yet
boundary hashicorp	`< 0.11.0`	`0.11.0`

Description

Hashicorp Boundary is vulnerable to Clickjacking which allow for the interception of login credentials, re-direction of users to malicious sites, or causing users to perform malicious actions on the site.

NVD description

Hashicorp Boundary v0.8.0 is vulnerable to Clickjacking which allow for the interception of login credentials, re-direction of users to malicious sites, or causing users to perform malicious actions on the site.

References

nvd.nist.gov/vuln/detail/CVE-2022-36182 · ADVISORY
hashicorp/boundary · PACKAGE
owasp.org/www-community/attacks/Clickjacking · WEB
packetstormsecurity.com/files/168654/Hashicorp-Boundary-Clickjacking.html · WEB

Autres vulnérabilités de github.com/hashicorp/boundary

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

github.com/hashicorp/boundary

≤ 0.11.0

No fix yet

boundary

hashicorp

< 0.11.0

0.11.0

Description

NVD description

Autres vulnérabilités de github.com/hashicorp/boundary

Tout voir →