Логотип exploitDog
bind:CVE-2024-47764
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-47764

Количество 6

Количество 6

ubuntu логотип

CVE-2024-47764

больше 1 года назад

cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter other fields of the cookie. Upgrade to 0.7.0, which updates the validation for name, path, and domain.

EPSS: Низкий
redhat логотип

CVE-2024-47764

больше 1 года назад

cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter other fields of the cookie. Upgrade to 0.7.0, which updates the validation for name, path, and domain.

CVSS3: 3.7
EPSS: Низкий
nvd логотип

CVE-2024-47764

больше 1 года назад

cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter other fields of the cookie. Upgrade to 0.7.0, which updates the validation for name, path, and domain.

EPSS: Низкий
msrc логотип

CVE-2024-47764

около 1 года назад

EPSS: Низкий
debian логотип

CVE-2024-47764

больше 1 года назад

cookie is a basic HTTP cookie parser and serializer for HTTP servers. ...

EPSS: Низкий
github логотип

GHSA-pxg6-pf52-xh8x

больше 1 года назад

cookie accepts cookie name, path, and domain with out of bounds characters

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2024-47764

cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter other fields of the cookie. Upgrade to 0.7.0, which updates the validation for name, path, and domain.

0%
Низкий
больше 1 года назад
redhat логотип
CVE-2024-47764

cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter other fields of the cookie. Upgrade to 0.7.0, which updates the validation for name, path, and domain.

CVSS3: 3.7
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2024-47764

cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter other fields of the cookie. Upgrade to 0.7.0, which updates the validation for name, path, and domain.

0%
Низкий
больше 1 года назад
msrc логотип
0%
Низкий
около 1 года назад
debian логотип
CVE-2024-47764

cookie is a basic HTTP cookie parser and serializer for HTTP servers. ...

0%
Низкий
больше 1 года назад
github логотип
GHSA-pxg6-pf52-xh8x

cookie accepts cookie name, path, and domain with out of bounds characters

0%
Низкий
больше 1 года назад

Уязвимостей на страницу