Fallos del tipo CWE-1275

25 resultados

Cookie sensível sem atributo SameSite adequado

Ocorre quando um cookie que carrega dados sensíveis (sessão, autenticação, token) não possui o atributo SameSite configurado corretamente. Sem isso, o navegador envia o cookie automaticamente em requisições cross-site, expondo a aplicação a ataques CSRF (falsificação de solicitação entre sites).

Ejemplo

Um banco define um cookie de sessão com `Set-Cookie: session_id=abc123` sem `SameSite`. Um atacante cria um site malicioso que, quando visitado por um cliente autenticado, executa uma transferência bancária via requisição automática — o navegador envia o cookie de sessão sem questionar.

Cómo mitigar

Configure o atributo SameSite como `Strict` (melhor proteção) ou `Lax` (compatibilidade razoável) no header Set-Cookie. Para cookies de autenticação sensíveis, prefira `SameSite=Strict`. Valide também a origem das requisições no servidor como camada adicional.

CVE-2024-6611CRITICALIncorrect handling of SameSite cookiesEPSS 0.7%CVE-2023-53957HIGHKimai 1.30.10 SameSite Cookie Vulnerability Session HijackingEPSS 0.5%CVE-2022-38386MEDIUMIBM Cloud Pak for Security information disclosureEPSS 0.5%CVE-2025-36134LOWIBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosureEPSS 0.3%CVE-2024-42212MEDIUMHCL BigFix Compliance is affected by an improper or missing SameSite attributeEPSS 0.2%CVE-2026-55688MEDIUMAsyncHttpClient: Cookie stored for an unrelated domain (cookie tossing) via ThreadSafeCookieStoreEPSS 0.2%CVE-2024-43173LOWIBM Concert information disclosureEPSS 0.2%CVE-2024-30155MEDIUMHCL SX is susceptible to cookie with Insecure, Improper, or Missing SameSite attribute vulnerabilityEPSS 0.2%CVE-2025-52628MEDIUMHCL AION is susceptible to Missing SameSite vulnerabilityEPSS 0.2%CVE-2025-24387MEDIUMMissing CSRF protectionEPSS 0.1%CVE-2026-8409LOWConcrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/logs/deleteEPSS 0.1%CVE-2026-8410LOWConcrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/logs/bulk/deleteEPSS 0.1%CVE-2025-24897HIGHMisskey CSRF vulnerability due to insecure configuration of authentication cookie attributesEPSS 0.1%CVE-2026-8412LOWConcrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/cacheEPSS 0.1%CVE-2026-8433LOWConcrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file rescan()EPSS 0.1%CVE-2026-8411LOWConcrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/deleteEPSS 0.1%CVE-2026-8414LOWConcrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/event/duplicateEPSS 0.1%CVE-2026-8415LOWConcrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/express/association/reorderEPSS 0.1%CVE-2026-8427LOWConcrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file removeFavoriteFolder($id)EPSS 0.1%CVE-2026-8432LOWConcrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file star()EPSS 0.1%