Threats Tagged 'cve-2025-65922'
View all threats tagged with 'cve-2025-65922'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-65922'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2025-65922 is a medium-severity vulnerability in Planka 2.0.0 where the application lacks X-Frame-Options and Content Security Policy (CSP) frame-ancestors headers. This omission allows attackers to embed the Planka interface within malicious iframes, potentially facilitating phishing attacks through UI redressing. Although the vulnerability does not permit unauthorized modification of projects or tasks, users may be tricked into entering sensitive information into fake overlays. The vendor disputes the severity, citing SameSite=Strict cookies and browser same-origin policies that prevent session establishment and credential interception in cross-origin iframe contexts. Exploitation requires user interaction and trust in the malicious parent page, similar to traditional phishing. No known exploits are currently reported in the wild. The CVSS score is 4.3, reflecting limited confidentiality impact and no integrity or availability impact. Join the discussion | CVE Database V5 | 01/05/2026, 00:00:00 UTC Added: 01/05/2026, 18:22:51 UTC |
Showing 1 to 1 of 1 result