Lucene search
MitreCVELIST:CVE-2019-19736HistoryDec 30, 2019 - 5:00 p.m.
CVE-2019-19736
2019-12-3017:00:12
mitre
www.cve.org
6
EPSS
0.001
Percentile
33.8%
MFScripts YetiShare 3.5.2 through 4.5.3 does not set the HttpOnly flag on session cookies, allowing the cookie to be read by script, which can potentially be used by attackers to obtain the cookie via cross-site scripting.
Related
cve
cve
CVE-2019-19736
2019-12-30 17:15:20
nvd
nvd
CVE-2019-19736
2019-12-30 17:15:20
prion
prion
Cross site scripting
2019-12-30 17:15:00