exploitDog

GHSA-ghm5-2w98-w493

Опубликовано: 13 мая 2022

Источник: github

Github: Не прошло ревью

Описание

TorrentFlux 2.4 allows remote authenticated users to obtain other users' cookies via the cid parameter in an editCookies action to profile.php.

TorrentFlux 2.4 allows remote authenticated users to obtain other users' cookies via the cid parameter in an editCookies action to profile.php.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2014-6028
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759573
http://www.openwall.com/lists/oss-security/2014/08/29/5
http://www.openwall.com/lists/oss-security/2014/09/02/3
http://www.securitytracker.com/id/1030791

EPSS

Процентиль: 76%

0.01706

Низкий

CVE ID

Дефекты

CWE-20

Связанные уязвимости

CVE-2014-6028

ubuntu

около 12 лет назад

TorrentFlux 2.4 allows remote authenticated users to obtain other users' cookies via the cid parameter in an editCookies action to profile.php.

CVE-2014-6028

nvd

около 12 лет назад

TorrentFlux 2.4 allows remote authenticated users to obtain other users' cookies via the cid parameter in an editCookies action to profile.php.

CVE-2014-6028

debian

около 12 лет назад

TorrentFlux 2.4 allows remote authenticated users to obtain other user ...

EPSS

Процентиль: 76%

0.01706

Низкий

CVE ID

Дефекты

CWE-20