Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Improper Restriction of Rendered UI Layers or Frames in ledgersmb/ledgersmb
Vulnerability Description
LedgerSMB does not sufficiently guard against being wrapped by other sites, making it vulnerable to 'clickjacking'. This allows an attacker to trick a targetted user to execute unintended actions.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N
Vulnerability Type
不当限制渲染UI层或帧
Vulnerability Title
LedgerSMB 安全漏洞
Vulnerability Description
LedgerSMB是一个免费的基于网络的复式记账系统，具有报价、订购、发票、项目、考勤卡、库存管理、运输等功能。 LedgerSMB 存在安全漏洞，该漏洞源于应用没有充分防止被其他站点包裹，使其容易受到"clickjacking"的影响。这允许攻击者欺骗目标用户执行意外操作。
CVSS Information
N/A
Vulnerability Type
N/A