Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cwj8-hfgh-f4wm

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Pyplate 0.08 does not include the HTTPOnly flag in a Set-Cookie header for the id cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.

Pyplate 0.08 does not include the HTTPOnly flag in a Set-Cookie header for the id cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.

EPSS

Процентиль: 43%
0.00207
Низкий

Дефекты

CWE-200

Связанные уязвимости

nvd
больше 11 лет назад

Pyplate 0.08 does not include the HTTPOnly flag in a Set-Cookie header for the id cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.

EPSS

Процентиль: 43%
0.00207
Низкий

Дефекты

CWE-200