CVE-2021-41657
MediumCVSS 6.1Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
SmartBear CodeCollaborator version 6.1.6102 contains a vulnerability in the web UI that allows a clickjacking attack. An attacker can trick a user into clicking a seemingly harmless element, performing unauthorized actions.
Risk Assessment
The risk involves potential session hijacking and execution of unwanted operations, such as configuration changes or data theft, without the victim's knowledge.
Recommendation
It is recommended to immediately update to the latest version of SmartBear CodeCollaborator and implement X-Frame-Options and Content-Security-Policy headers to protect against clickjacking.
Original NVD description (English source)
SmartBear CodeCollaborator v6.1.6102 was discovered to contain a vulnerability in the web UI which would allow an attacker to conduct a clickjacking attack.