CVE-2024-10454 | THREATINT

Description

Clickjacking vulnerability in Clibo Manager v1.1.9.12 in the '/public/login' directory, a login panel. This vulnerability occurs due to the absence of an X-Frame-Options server-side header. An attacker could overlay a transparent iframe to perform click hijacking on victims.

Reserved 2024-10-28 | Published 2024-10-31 | Updated 2024-10-31 | Assigner INCIBE

MEDIUM: 6.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Problem types

CWE-1021 Improper Restriction of Rendered UI Layers or Frames

Product status

Default status

unaffected

1.1.9.12

affected

Credits

David Padilla Alvarado finder

References

www.incibe.es/...so/clickjacking-vulnerability-clibo-manager

cve.org (CVE-2024-10454)

nvd.nist.gov (CVE-2024-10454)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.