What is GHSA-g4gg-9f62-jfph?

GHSA-g4gg-9f62-jfph is a security advisory published by GitHub Security Advisories with Medium severity. OrientDB Studio web management interface is vulnerable to clickjacking attacks

Which CVE IDs does GHSA-g4gg-9f62-jfph cover?

GHSA-g4gg-9f62-jfph covers the following CVE IDs: CVE-2015-2918. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-g4gg-9f62-jfph?

GHSA-g4gg-9f62-jfph has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-g4gg-9f62-jfph?

GHSA-g4gg-9f62-jfph affects 2 products, including: maven/com.orientechnologies:orientdb-studio:\u003c 2.0.15; maven/com.orientechnologies:orientdb-studio:= 2.1.0.

GHSA-g4gg-9f62-jfphMediumCVSS 6.1

OrientDB Studio web management interface is vulnerable to clickjacking attacks

Vendor

GitHub Security Advisories

Published

October 18, 2018

Last Modified

September 29, 2023

🔗 CVE IDs covered (1)

CVE-2015-2918 →

📋 Description

The Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.

🎯 Affected products2

maven/com.orientechnologies:orientdb-studio:< 2.0.15
maven/com.orientechnologies:orientdb-studio:= 2.1.0

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2015-2918
https://github.com/advisories/GHSA-g4gg-9f62-jfph
https://www.kb.cert.org/vuls/id/845332