Description
LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the credentials for a victim's account on a previously visited web site, because do_popupregister can be bypassed via clickjacking.
Unscored
CVE-2019-16371
EUVD-2019-7128GHSA-36f7-g2v6-4rj3
LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the credentials for a victim's account on a p…
Published Sep 16, 2019 · Updated Aug 5, 2024 · Assigned by mitre