CVE-2025-64387

Publication date

2025-10-31 14:12:55

Family

S21sec

State

PUBLISHED

Description

The web application is vulnerable to a so-called ‘clickjacking’ attack. In this type of attack, the vulnerable page is inserted into a page controlled by the attacker in order to deceive the victim. This deception can range from making the victim click on a button to making them enter their login credentials in a form that, a priori, appears legitimate.