Loading HuntDB...

Single Sing On - Clickjacking

Low
S
Semrush
Submitted None
Reported by r0p3

Vulnerability Details

Technical details and impact analysis

UI Redressing (Clickjacking)
**Description:** Clickjacking (User Interface redress attack, UI redress attack, UI redressing) is a malicious technique of tricking a Web user into clicking on something different from what the user perceives they are clicking on. **Browsers Verified In:** Any **Steps To Reproduce:** Create HTML file containg following code: ` <iframe src="https://sso.semrush.com/"></iframe> ` Execute the HTML file & you will see Single Sing On login page present trough the iframe. **Supporting Material/References:** ## Impact Revealing confidential information(credentials) AND/OR taking control of their computer/account while clicking on seemingly innocuous web pages.

Report Details

Additional information and metadata

State

Closed

Substate

Resolved

Submitted

Weakness

UI Redressing (Clickjacking)