EUVD-2025-208151
ID: EUVD-2025-208151
Severity: medium
CVSS v4: 5.3 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)
CVSS v3: Not provided
CWE: None listed
Source: ENISA
Description
The CGM CLININET application does not implement any mechanisms that prevent clickjacking attacks, neither HTTP security headers nor HTML-based frame‑busting protections were detected. As a result, an attacker can embed the application inside a maliciously crafted IFRAME and trick users into performing unintended actions, including potentially bypassing CSRF/XSRF defenses.
Timestamps
- Normalized:
- Last updated:
References
No references provided.