Threats tagged 'ghsa-mcgp-qf96-gj54'

Zenitel Connect versions before 1.11.0 have a vulnerability in their web interface where an integration iframe is loaded without sandboxing or origin restrictions. This flaw allows remote attackers to present phishing content to authenticated users by crafting a malicious frame source. The vulnerability has a medium severity rating with a CVSS score of 5.1.