Skip to content
OpenAdvisories
Medium · 6.1 CVE-2024-10454 EUVD-2024-33129GHSA-mxvr-rwhq-rpw8

Clickjacking vulnerability in Clibo Manager

Published Oct 31, 2024 · Updated Oct 31, 2024 · Assigned by INCIBE

Description

Clickjacking vulnerability in Clibo Manager v1.1.9.12 in the '/public/login' directory, a login panel. This vulnerability occurs due to the absence of an X-Frame-Options server-side header. An attacker could overlay a transparent iframe to perform click hijacking on victims.

Affected products

VendorProductAffectedFixed
Clibo Manager Clibo Manager 1.1.9.12 —

References