Lucene search
Uonghoangminhchau84973F6B-739A-4D7E-8757-FC58CBBAF6EFHistoryDec 21, 2022 - 6:39 a.m.
Cookie without Secure attribute
2022-12-2106:39:03
uonghoangminhchau
www.huntr.dev
7
memos_session
web demo
secure flag
browser's dev tool
bug bounty
EPSS
0.001
Percentile
31.0%
Description
At the moment, memos_session has the value false at secure flag.
Proof of Concept
-
Access to web demo https://demo.usememos.com/
-
Use browser’s dev tool to check the cookie, we can see there is a memos_session having value false at Secure.
Related
prion
prion
Session fixation
2022-12-23 12:15:00
osv
osv
usememos/memos missing Secure cookie attribute
2022-12-23 12:30:25
CVE-2022-4683
2022-12-23 12:15:08
usememos/memos missing Secure cookie attribute in github.com/usememos/memos
2024-08-21 16:03:59
cve
cve
CVE-2022-4683
2022-12-23 12:15:08
github
github
usememos/memos missing Secure cookie attribute
2022-12-23 12:30:25
nvd
nvd
CVE-2022-4683
2022-12-23 12:15:08
veracode
veracode
Information Disclosure
2022-12-27 07:21:30
cvelist
cvelist