Vulnerabilities > CVE-2022-36736 - Improper Restriction of Rendered UI Layers or Frames vulnerability in Jitsi 2.10.5550

047910
CVSS 6.1 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
jitsi
CWE-1021

Summary

Jitsi-2.10.5550 was discovered to contain a vulnerability in its web UI which allows attackers to perform a clickjacking attack via a crafted HTTP request. NOTE: this is disputed by the vendor

Vulnerable Configurations

Part Description Count
Application
Jitsi
1