Описание
SAP Commerce, by default, sets certain cookies with the SameSite attribute configured to None (SameSite=None). This includes authentication cookies utilized in SAP Commerce Backoffice. Applying this setting reduces defense in depth against CSRF and may lead to future compatibility issues.
EPSS
Процентиль: 11%
0.00037
Низкий
6.8 Medium
CVSS3
Дефекты
CWE-352
Связанные уязвимости
CVSS3: 6.8
github
12 месяцев назад
SAP Commerce, by default, sets certain cookies with the SameSite attribute configured to None (SameSite=None). This includes authentication cookies utilized in SAP Commerce Backoffice. Applying this setting reduces defense in depth against CSRF and may lead to future compatibility issues.
EPSS
Процентиль: 11%
0.00037
Низкий
6.8 Medium
CVSS3
Дефекты
CWE-352