| Package | Affected versions | Patched versions |
|---|---|---|
| espocrm | = 7.1.8 |
EspoCRM version 7.1.8 is vulnerable to Missing Secure Flag allowing the browser to send plain text cookies over an insecure channel (HTTP). An attacker may capture the cookie from the insecure channel using MITM attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free