Piwik before 1.1 does not prevent the rendering of the login form inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2011-01-10 12:00
Updated : 2019-11-21 05:30
NVD link : CVE-2011-0399
Mitre link : CVE-2011-0399
JSON object : View
CWE
Products Affected
matomo
- matomo