CWE-1022 · 18 kayıt
Use of Web Link to Untrusted Target with window.opener Access
Bu sınıftaki CVE’ler
18 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-39727İstismar yok | IBM Engineering Lifecycle Optimization - Engineering Insights tabnabbingibm · engineering lifecycle optimization - engineering insights · CWE-1022 | Kritik9,8 | — | %0,3 | 25 Ara 2024 |
26İzleyin | CVE-2022-1583İstismar yok | External Links in New Window / New Tab < 1.43 - Tabnabbingwebfactoryltd · external links in new window \/ new tab · CWE-1022 | Orta6,5 | — | %1,3 | 30 May 2022 |
26İzleyin | GHSA-588m-9qg5-35pqİstismar yok | Reverse Tabnabbing in quillnpm · quill · CWE-1022 | Orta6,5 | — | — | 3 Eyl 2020 |
24İzleyin | CVE-2020-36624İstismar yok | ahorner text-helpers translation.rb reverse tabnabbingtexthelpers project · texthelpers · CWE-1022 | Orta6,1 | — | %0,5 | 22 Ara 2022 |
24İzleyin | CVE-2021-33697İstismar yok | Under certain conditions, SAP BusinessObjects Business Intelligence Platform (SAPUI5), versions - 420, 430, can allow an unauthenticated attsap · businessobjects business intelligence · CWE-1022 | Orta6,1 | — | %0,5 | 15 Eyl 2021 |
24İzleyin | CVE-2018-25058İstismar yok | Twitter-Post-Fetcher Link Target twitterFetcher.js reverse tabnabbingtwitter-post-fetcher project · twitter-post-fetcher · CWE-1022 | Orta6,1 | — | %0,5 | 29 Ara 2022 |
24İzleyin | CVE-2022-4927İstismar yok | ualbertalib NEOSDiscovery _refworks.html.erb reverse tabnabbingualberta · neosdiscovery · CWE-1022 | Orta6,1 | — | %0,4 | 5 Mar 2023 |
24İzleyin | CVE-2025-33014İstismar yok | IBM Sterling B2B Integrator and IBM Sterling File Gateway link injectionibm · sterling b2b integrator · CWE-1022 | Orta6,1 | — | %0,2 | 18 Tem 2025 |
24İzleyin | CVE-2025-27902İstismar yok | IBM Db2 Recovery Expert for Linux, Unix and Windows Information Disclosureibm · db2 recovery expert for linux, unix and windows · CWE-1022 | Orta6,1 | — | %0,1 | 12 Eki 2026 |
21İzleyin | CVE-2022-2600İstismar yok | Auto-hyperlink URLs <= 5.4.1 - Tab Nabbingauto-hyperlink urls project · auto-hyperlink urls · CWE-1022 | Orta5,4 | — | %0,6 | 22 Ağu 2022 |
21İzleyin | CVE-2018-25089İstismar yok | glb Meetup Tag Extension Link Attribute reverse tabnabbingglb · meetup tag · CWE-1022 | Orta5,3 | — | %0,6 | 28 Ağu 2023 |
19İzleyin | CVE-2021-39112İstismar yok | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to redirect users to a malicious URL via a reverse tabnappatlassian · data center · CWE-1022 | Orta4,8 | — | %0,9 | 24 Ağu 2021 |
17İzleyin | GHSA-x9p2-fxq6-2m5fİstismar yok | Reverse Tabnapping in swagger-uinpm · swagger-ui · CWE-1022 | Orta4,3 | — | — | 20 Haz 2019 |
16İzleyin | CVE-2026-71555İstismar yok | PILOS: Reverse tabnabbing in room descriptionthm-health · pilos · CWE-1022 | Orta4,1 | — | %0,2 | 6 Ağu 2026 |
14İzleyin | CVE-2025-42941İstismar yok | Reverse Tabnabbing vulnerability in SAP Fiori (Launchpad)sap_se · sap fiori (launchpad) · CWE-1022 | Düşük3,5 | — | %0,2 | 11 Ağu 2025 |
12İzleyin | GHSA-h6mq-3cj6-h738İstismar yok | Reverse Tabnabbing in showdownnpm · showdown · CWE-1022 | Düşük3,1 | — | — | 3 Eyl 2020 |
10İzleyin | GHSA-xcxh-6cv4-q8p8İstismar yok | HFS user adding a "web link" in HFS is vulnerable to "target=_blank" exploitnpm · hfs · CWE-1022 | Düşük2,5 | — | — | 12 Ağu 2025 |
8İzleyin | CVE-2025-59842İstismar yok | JupyterLab LaTeX typesetter links did not enforce `noopener` attributejupyter · jupyterlab · CWE-1022 | Düşük2,1 | — | %0,2 | 26 Eyl 2025 |
- CVE-2024-3972739İzleyin
IBM Engineering Lifecycle Optimization - Engineering Insights tabnabbing
KritikCVSS 9,8İstismar yokEPSS %0ibm · engineering lifecycle optimization - engineering insights25 Ara 2024
- CVE-2022-158326İzleyin
External Links in New Window / New Tab < 1.43 - Tabnabbing
OrtaCVSS 6,5İstismar yokEPSS %1webfactoryltd · external links in new window \/ new tab30 May 2022
- GHSA-588m-9qg5-35pq26İzleyin
Reverse Tabnabbing in quill
OrtaCVSS 6,5İstismar yoknpm · quill3 Eyl 2020
- CVE-2020-3662424İzleyin
ahorner text-helpers translation.rb reverse tabnabbing
OrtaCVSS 6,1İstismar yokEPSS %0texthelpers project · texthelpers22 Ara 2022
- CVE-2021-3369724İzleyin
Under certain conditions, SAP BusinessObjects Business Intelligence Platform (SAPUI5), versions - 420, 430, can allow an unauthenticated att
OrtaCVSS 6,1İstismar yokEPSS %0sap · businessobjects business intelligence15 Eyl 2021
- CVE-2018-2505824İzleyin
Twitter-Post-Fetcher Link Target twitterFetcher.js reverse tabnabbing
OrtaCVSS 6,1İstismar yokEPSS %0twitter-post-fetcher project · twitter-post-fetcher29 Ara 2022
- CVE-2022-492724İzleyin
ualbertalib NEOSDiscovery _refworks.html.erb reverse tabnabbing
OrtaCVSS 6,1İstismar yokEPSS %0ualberta · neosdiscovery5 Mar 2023
- CVE-2025-3301424İzleyin
IBM Sterling B2B Integrator and IBM Sterling File Gateway link injection
OrtaCVSS 6,1İstismar yokEPSS %0ibm · sterling b2b integrator18 Tem 2025
- CVE-2025-2790224İzleyin
IBM Db2 Recovery Expert for Linux, Unix and Windows Information Disclosure
OrtaCVSS 6,1İstismar yokEPSS %0ibm · db2 recovery expert for linux, unix and windows12 Eki 2026
- CVE-2022-260021İzleyin
Auto-hyperlink URLs <= 5.4.1 - Tab Nabbing
OrtaCVSS 5,4İstismar yokEPSS %0auto-hyperlink urls project · auto-hyperlink urls22 Ağu 2022
- CVE-2018-2508921İzleyin
glb Meetup Tag Extension Link Attribute reverse tabnabbing
OrtaCVSS 5,3İstismar yokEPSS %0glb · meetup tag28 Ağu 2023
- CVE-2021-3911219İzleyin
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to redirect users to a malicious URL via a reverse tabnapp
OrtaCVSS 4,8İstismar yokEPSS %0atlassian · data center24 Ağu 2021
- GHSA-x9p2-fxq6-2m5f17İzleyin
Reverse Tabnapping in swagger-ui
OrtaCVSS 4,3İstismar yoknpm · swagger-ui20 Haz 2019
- CVE-2026-7155516İzleyin
PILOS: Reverse tabnabbing in room description
OrtaCVSS 4,1İstismar yokEPSS %0thm-health · pilos6 Ağu 2026
- CVE-2025-4294114İzleyin
Reverse Tabnabbing vulnerability in SAP Fiori (Launchpad)
DüşükCVSS 3,5İstismar yokEPSS %0sap_se · sap fiori (launchpad)11 Ağu 2025
- GHSA-h6mq-3cj6-h73812İzleyin
Reverse Tabnabbing in showdown
DüşükCVSS 3,1İstismar yoknpm · showdown3 Eyl 2020
- GHSA-xcxh-6cv4-q8p810İzleyin
HFS user adding a "web link" in HFS is vulnerable to "target=_blank" exploit
DüşükCVSS 2,5İstismar yoknpm · hfs12 Ağu 2025
- CVE-2025-598428İzleyin
JupyterLab LaTeX typesetter links did not enforce `noopener` attribute
DüşükCVSS 2,1İstismar yokEPSS %0jupyter · jupyterlab26 Eyl 2025