Sensitive Cookie Without HttpOnly and Secure Flag

ALTO 7.5CVE-2017-1000046 · GHSA-8255-qf34-44mp · Published 17/07/2017 · updated 17/06/2026

Em resumo

CVE-2017-1000046 é uma vulnerabilidade ALTO (CVSS 7.5) que afeta mautic/core, mautic (mautic).
Chance de exploração nos próximos 30 dias (EPSS): 1.1%, maior que 65.9% das vulnerabilidades.
Correção: atualize para 2.1.1 ou posterior.

Package	Affected versions	Patched versions
mautic/core Packagist	`< 2.1.1`	`2.1.1`
mautic mautic	`≤ 2.6.1`	No fix yet

Mautic prior to 2.1.1 fails to set flags on session cookies

NVD description

Mautic 2.6.1 and earlier fails to set flags on session cookies

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 2.1.1

2.1.1

≤ 2.6.1

No fix yet

Mais vulnerabilidades de mautic/core

Ver tudo →