CVE-2023-5866

Summary

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.2.1.

Affected Software

Weaknesses

• CWE-614: CWE-614 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

ADP Enrichment

CVE Program Container

Additional References

• https://huntr.com/bounties/ec44bcba-ae7f-497a-851e-8165ecf56945
• https://github.com/thorsten/phpmyfaq/commit/fdacff14acd5e69841068f0e32b59e2d1b1d0d55

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

References

• https://huntr.com/bounties/ec44bcba-ae7f-497a-851e-8165ecf56945
• https://github.com/thorsten/phpmyfaq/commit/fdacff14acd5e69841068f0e32b59e2d1b1d0d55

• ←Previous
• Next→