Lucene search
MitreCVELIST:CVE-2023-28472HistoryApr 28, 2023 - 12:00 a.m.
CVE-2023-28472
2023-04-2800:00:00
mitre
www.cve.org
2
concrete cms
security vulnerability
cookie vulnerability
http only attribute
cve-2023-28472
EPSS
0.001
Percentile
37.4%
Concrete CMS (previously concrete5) versions 8.5.12 and below, and 9.0 through 9.1.3 does not have Secure and HTTP only attributes set for ccmPoll cookies.
Related
github
github
Concrete CMS missing secure cookie parameters
2023-04-28 15:30:18
veracode
veracode
Insecure Cookies
2023-05-22 08:24:43
osv
osv
Concrete CMS missing secure cookie parameters
2023-04-28 15:30:18
prion
prion
Code injection
2023-04-28 14:15:00
cve
cve
CVE-2023-28472
2023-04-28 14:15:10
nvd
nvd
CVE-2023-28472
2023-04-28 14:15:10