Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

There was a problem

You must be a member of this account.

Critical Click Jacking Vulnerability In 2.3.1

#1233

Hello Exponent

while looking into your cms i found that its vulnerable to click jacking

by using clickjacking an attacker can directly bypass the referer based csrf protection which will be exploited on victim side

please see the attached screen shot and to know how it can be exploited kindly read my blog
post on this same vulnerability -

http://hacktivity.websecgeeks.com/linkedin-clickjacking/

will look forward to you

Reported by Narendra Bhati · November 16th, 2014 @ 10:44 AM

State: new
Milestone: User issues
Assigned to: expNinja expNinja

Activity

  1. Narendra Bhati
    Narendra Bhati
    • Assigned user set to expNinja

    So what your are going to do next ? about this issue !

    December 20th, 2014 @ 02:02 PM

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.