Hashicorp Boundary vulnerable to clickjacking

MEDIO 6.1CVE-2022-36182 · GHSA-xqv2-3vvq-qg6r · Published 27/10/2022 · updated 17/06/2026

In breve

CVE-2022-36182 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda github.com/hashicorp/boundary, boundary (hashicorp).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.70%, superiore al 53.2% delle vulnerabilità.
Correzione: aggiornare a 0.11.0 o successiva.

Package	Affected versions	Patched versions
github.com/hashicorp/boundary Go	`≤ 0.11.0`	No fix yet
boundary hashicorp	`< 0.11.0`	`0.11.0`

Description

Hashicorp Boundary is vulnerable to Clickjacking which allow for the interception of login credentials, re-direction of users to malicious sites, or causing users to perform malicious actions on the site.

NVD description

Hashicorp Boundary v0.8.0 is vulnerable to Clickjacking which allow for the interception of login credentials, re-direction of users to malicious sites, or causing users to perform malicious actions on the site.

References

nvd.nist.gov/vuln/detail/CVE-2022-36182 · ADVISORY
hashicorp/boundary · PACKAGE
owasp.org/www-community/attacks/Clickjacking · WEB
packetstormsecurity.com/files/168654/Hashicorp-Boundary-Clickjacking.html · WEB

Altre vulnerabilità di github.com/hashicorp/boundary

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

github.com/hashicorp/boundary

≤ 0.11.0

No fix yet

boundary

hashicorp

< 0.11.0

0.11.0

Description

NVD description

Altre vulnerabilità di github.com/hashicorp/boundary

Vedi tutto →