Description
The Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.
Remediation
References
https://www.kb.cert.org/vuls/id/845332
Related Vulnerabilities
CVE-2022-2079 Vulnerability in npm package nocodb
CVE-2020-36048 Vulnerability in maven package org.webjars.npm:engine.io
CVE-2020-9038 Vulnerability in npm package joplin
CVE-2021-21391 Vulnerability in npm package @ckeditor/ckeditor5-image
CVE-2018-1000420 Vulnerability in maven package org.jenkins-ci.plugins:mesos