rdiffweb vulnerable to Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-3174 · ADVISORY
• ikus060/rdiffweb commit f2de237 · WEB
• GitHub Advisory GHSA-mjw4-xvx6-3grg · ADVISORY
• ikus060/rdiffweb · PACKAGE
• pypa/advisory-database · WEB
• huntr.dev/bounties/d8a32bd6-c76d-4140-a5ca-ef368a3058ce · WEB

Lỗ hổng khác của rdiffweb

• CVE-2025-67796CAO 8.1IKUS Rdiffweb before 2.10.5 has an improper authorization flaw that allows an attacker with any valid or stolen access token to act as other…
• CVE-2023-5289CAO 8.8Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4.
• CVE-2023-4138TRUNG BÌNH 6.5Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.0.
• CVE-2022-4724NGHIÊM TRỌNG 9.8Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5.
• CVE-2022-4723TRUNG BÌNH 6.5Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.5.