Lucene search
Irfansayyed-github39889A3F-8BB7-448A-B0D4-A18C671BBD23HistorySep 20, 2022 - 1:41 p.m.
Secure token is missed when ivalid URL is entered
2022-09-2013:41:04
irfansayyed-github
www.huntr.dev
7
cookie security
session id
invalid url
bugbounty
EPSS
0.001
Percentile
30.2%
Description
The cookie session_id does not have secure attribute when the URL is invalid
Proof of Concept
1.Login into the application.
2.Send the request https://rdiffweb-demo.ikus-soft.com/browse/admin/MyWindowsLaptop/D/TC3080/test.
Related
cve
cve
CVE-2022-3250
2022-09-21 17:15:09
osv
osv
PYSEC-2022-287
2022-09-21 17:15:00
rdiffweb has insecure HTTP cookies
2022-09-22 00:00:24
CVE-2022-3250
2022-09-21 17:15:09
prion
prion
Session fixation
2022-09-21 17:15:00
github
github
rdiffweb has insecure HTTP cookies
2022-09-22 00:00:24
nvd
nvd
CVE-2022-3250
2022-09-21 17:15:09
cvelist
cvelist
veracode
veracode
Information Disclosure
2022-09-21 18:57:20