CVE-2023-38873
CVE-2023-38873
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
The commit 3730880 (April 2023) and v.0.9-beta1 of gugoan Economizzer is vulnerable to Clickjacking. Clickjacking, also known as a "UI redress attack", is when an attacker uses multiple transparent or opaque layers to trick a user into clicking on a button or link on another page when they were intending to click on the top-level page. Thus, the attacker is "hijacking" clicks meant for their page and routing them to another page, most likely owned by another application, domain, or both.
CVSS 6.5 · Media · EPSS 0,8%
- Publicación
- Actualización
Pila tecnológica: php
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
gugoan/economizzer Packagist
- Versiones
- v0.4-alpha
- v0.8-alpha
- v0.9-beta1
- Intervalos de versiones afectados
- ECOSYSTEM: ≤ 0.9-beta1
Sin corrección publicada