Sensitive Cookie Without HttpOnly and Secure Flag

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2017-1000046 · ADVISORY
• mautic/mautic · WEB
• mautic/mautic#2311 · WEB
• mautic/mautic#2311 · WEB
• mautic/mautic · PACKAGE
• trustmatta.com/advisories/MATTA-2017-002.txt · WEB

mautic/core のその他の脆弱性

• CVE-2026-9811中 5.4A stored Cross-Site Scripting (XSS) vulnerability exists in the project selector component of Mautic 7. When rendering selection menus for a…
• CVE-2026-9809高 7.6A stored Cross-Site Scripting (XSS) vulnerability exists in the Projects component of Mautic 7. When displaying project tags and popovers on…
• CVE-2026-9808高 7.1An authorization bypass vulnerability exists in the Mautic 7 API v2 endpoints (utilizing API Platform). Under certain conditions, roles conf…
• CVE-2026-9559緊急 9.9A path traversal vulnerability exists in the campaign import feature of Mautic 7. When extracting uploaded ZIP files during campaign imports…
• CVE-2026-9558緊急 9.9A Server-Side Template Injection (SSTI) vulnerability exists in Mautic's theme engine. The platform renders uploaded Twig templates without …