Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-36f7-g2v6-4rj3

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the credentials for a victim's account on a previously visited web site, because do_popupregister can be bypassed via clickjacking.

LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the credentials for a victim's account on a previously visited web site, because do_popupregister can be bypassed via clickjacking.

EPSS

Процентиль: 49%
0.00262
Низкий

Дефекты

CWE-522

Связанные уязвимости

CVSS3: 8.2
nvd
больше 6 лет назад

LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the credentials for a victim's account on a previously visited web site, because do_popupregister can be bypassed via clickjacking.

EPSS

Процентиль: 49%
0.00262
Низкий

Дефекты

CWE-522