medium4.8
CVE-2022-3260
The response header has not enabled X-FRAME-OPTIONS, Which helps prevents against Clickjacking attack..
Impact
The response header has not enabled X-FRAME-OPTIONS, Which helps prevents against Clickjacking attack.. Some browsers would interpret these results incorrectly, allowing clickjacking attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Openshift | Version 4.9 |