Security Advisory

CVE-2024-10454

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-10-31 12:54:07
Last updated 2024-10-31 13:45:32
Assigner INCIBE
CVSS score 6.1
State PUBLISHED

Description

Clickjacking vulnerability in Clibo Manager v1.1.9.12 in the '/public/login' directory, a login panel. This vulnerability occurs due to the absence of an X-Frame-Options server-side header. An attacker could overlay a transparent iframe to perform click hijacking on victims.