CVE-2023-38873
CVE-2023-38873
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
The commit 3730880 (April 2023) and v.0.9-beta1 of gugoan Economizzer is vulnerable to Clickjacking. Clickjacking, also known as a "UI redress attack", is when an attacker uses multiple transparent or opaque layers to trick a user into clicking on a button or link on another page when they were intending to click on the top-level page. Thus, the attacker is "hijacking" clicks meant for their page and routing them to another page, most likely owned by another application, domain, or both.
CVSS 6.5 · Moyenne · EPSS 0,8%
- Publication
- Mise à jour
Pile logicielle: php
Produits et versions concernés
n/a
- Versions du logiciel
- n/a: Concernée
Aucun correctif publié
gugoan/economizzer Packagist
- Versions du logiciel
- v0.4-alpha
- v0.8-alpha
- v0.9-beta1
- Plages de versions concernées
- ECOSYSTEM: ≤ 0.9-beta1
Aucun correctif publié