CVE-2024-10454

Name of the Vulnerable Software and Affected Versions Clibo Manager version 1.1.9.12

Description A clickjacking issue occurs in the '/public/login' directory, a login panel, due to the absence of an X-Frame-Options server-side header. An attacker could overlay a transparent iframe to perform click hijacking on victims.

Recommendations For Clibo Manager version 1.1.9.12, update to the latest version to mitigate risks. As a temporary workaround, consider restricting access to the '/public/login' directory until a patch is available. Avoid using the vulnerable login panel until the issue is resolved.