Lucene search
MitreCVELIST:CVE-2018-7491HistoryOct 03, 2022 - 4:21 p.m.
CVE-2018-7491
2022-10-0316:21:48
mitre
www.cve.org
prestashop
ui-redressing
clickjacking
vulnerability
state-changing impact
user
admin
generatehtaccess function
tools.php
x-frame-options
content-security-policy
0.001 Low
EPSS
Percentile
34.5%
In PrestaShop through 1.7.2.5, a UI-Redressing/Clickjacking vulnerability was found that might lead to state-changing impact in the context of a user or an admin, because the generateHtaccess function in classes/Tools.php sets neither X-Frame-Options nor ‘Content-Security-Policy "frame-ancestors’ values.
Related
prion
prion
Spoofing
2018-02-26 17:29:00
cve
cve
CVE-2018-7491
2022-10-03 16:21:48
osv
osv
CVE-2018-7491
2018-02-26 17:29:00
nvd
nvd
CVE-2018-7491
2018-02-26 17:29:00