Single Sing On - Clickjacking
Low
S
Semrush
Submitted None
Actions:
Reported by
r0p3
Vulnerability Details
Technical details and impact analysis
**Description:**
Clickjacking (User Interface redress attack, UI redress attack, UI redressing) is a malicious technique of tricking a Web user into clicking on something different from what the user perceives they are clicking on.
**Browsers Verified In:**
Any
**Steps To Reproduce:**
Create HTML file containg following code:
` <iframe src="https://sso.semrush.com/"></iframe> `
Execute the HTML file & you will see Single Sing On login page present trough the iframe.
**Supporting Material/References:**
## Impact
Revealing confidential information(credentials) AND/OR taking control of their computer/account while clicking on seemingly innocuous web pages.
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Submitted
Weakness
UI Redressing (Clickjacking)