| Title | unilogies/bumsys < v2.0.2 - Clickjacking |
|---|---|
| Author | ctflearner |
| Severity | Medium |
| Impact | An attacker can trick users into performing unintended actions on the vulnerable application. |
| Remediation | Upgrade to version 2.0.2 or later to mitigate the Clickjacking vulnerability. |
| CVSS Score | 6.1 |
| EPSS Score | 0.65799 |
| CVE ID | CVE-2023-1362 |
| CWE ID | CWE-1021 |
| Tags | cve cve2023 bumsys clickjacking huntr bumsys_project vuln |
This template checks for the presence of clickjacking prevention headers in the HTTP response, aiming to identify vulnerabilities related to the improper restriction of rendered UI layers or frames in the GitHub repository unilogies/bumsys prior to version 2.0.2.
GET / HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Debian; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1362.yaml
🦈 Packet Capture: ⬇️ Download cve-2023-1362.pcap
N/AN/A