← voltar
CVE-2022-3174

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffweb

CVSS 7.5 HIGHEPSS 0.6%CWE-614
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
ikus060 · ikus060/rdiffweb

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://github.com/ikus060/rdiffweb/commit/f2de2371c5e13ce1c6fd6f9a1ed3e5d46b93cd7ehttps://huntr.dev/bounties/d8a32bd6-c76d-4140-a5ca-ef368a3058ce