Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 6

Количество 6

ubuntu логотип

CVE-2024-47764

почти 2 года назад

cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter other fields of the cookie. Upgrade to 0.7.0, which updates the validation for name, path, and domain.

EPSS: Низкий
redhat логотип

CVE-2024-47764

почти 2 года назад

cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter other fields of the cookie. Upgrade to 0.7.0, which updates the validation for name, path, and domain.

CVSS3: 3.7
EPSS: Низкий
nvd логотип

CVE-2024-47764

почти 2 года назад

cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter other fields of the cookie. Upgrade to 0.7.0, which updates the validation for name, path, and domain.

EPSS: Низкий
msrc логотип

CVE-2024-47764

почти 2 года назад

cookie accepts cookie name path and domain with out of bounds characters

EPSS: Низкий
debian логотип

CVE-2024-47764

почти 2 года назад

cookie is a basic HTTP cookie parser and serializer for HTTP servers. ...

EPSS: Низкий
github логотип

GHSA-pxg6-pf52-xh8x

почти 2 года назад

cookie accepts cookie name, path, and domain with out of bounds characters

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2024-47764

cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter other fields of the cookie. Upgrade to 0.7.0, which updates the validation for name, path, and domain.

1%
Низкий
почти 2 года назад
redhat логотип
CVE-2024-47764

cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter other fields of the cookie. Upgrade to 0.7.0, which updates the validation for name, path, and domain.

CVSS3: 3.7
1%
Низкий
почти 2 года назад
nvd логотип
CVE-2024-47764

cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter other fields of the cookie. Upgrade to 0.7.0, which updates the validation for name, path, and domain.

1%
Низкий
почти 2 года назад
msrc логотип
CVE-2024-47764

cookie accepts cookie name path and domain with out of bounds characters

1%
Низкий
почти 2 года назад
debian логотип
CVE-2024-47764

cookie is a basic HTTP cookie parser and serializer for HTTP servers. ...

1%
Низкий
почти 2 года назад
github логотип
GHSA-pxg6-pf52-xh8x

cookie accepts cookie name, path, and domain with out of bounds characters

1%
Низкий
почти 2 года назад

Уязвимостей на страницу