CVE-2021-3731: Debian Linux

Medium severity, CVSS 4.7. EPSS: 1.2% chance of exploitation in the next 30 days.

LedgerSMB does not sufficiently guard against being wrapped by other sites, making it vulnerable to 'clickjacking'. This allows an attacker to trick a targetted user to execute unintended actions.

Affected products

• Debian Debian Linux: version 10.0 only; version 11.0 only
• Ledgersmb Ledgersmb: from 1.1.0, up to and including 1.1.12; from 1.2.0, up to and including 1.2.26; from 1.3.0, up to and including 1.3.47; from 1.4.0, up to and including 1.4.42; from 1.5.0, up to and including 1.5.30; from 1.6.0, up to and including 1.6.33; …

Published 2021-08-23. Last modified 2026-06-17.