CVE-2022-3260 - AskarLabs CVE Database

CVE-2022-3260

Vendor N/A

Product Openshift

Weakness CWE-1021

Published December 8, 2022

Last update April 23, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The response header has not enabled X-FRAME-OPTIONS, Which helps prevents against Clickjacking attack.. Some browsers would interpret these results incorrectly, allowing clickjacking attacks.

Key dates

02Disclosure timeline

December 8, 2022 CVE published

April 23, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-3260 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/1021.html

Related vulnerabilities

04Related CVE

CVE-2025-49139 @haxtheweb/haxcms-nodejs Iframe Phishing vulnerability CVE-2024-2177 Improper Restriction of Rendered UI Layers or Frames in GitLab CVE-2023-6093 OnCell G3150A-LTE Series: Clickjacking Vulnerability CVE-2025-53096 Sunshine clickjacking in the UI leads to unauthorized actions being performed CVE-2023-3140 KNIME Hub Web Application is vulnerable to clickjacking