CVE-2018-14398

MEDIUM · CVSS 6.1 EPSS 0.68%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-09-07 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2018-14398

Severity

MEDIUM

CVSS

6.1

EPSS

0.68%

Original NVD Description

An issue was discovered in Creme CRM 1.6.12. The value of the cancel button uses the content of the HTTP Referer header, and could be used to trick a user into visiting a fake login page in order to steal credentials.