Description

Access and login to the demo website: https://demo.openitcockpit.io/

Press F12 on your keyboard or right-click on the website to open dev-tool.

At Application tab, choose Cookies and there are some sensitive cookies without Secure flag. (CookieAuth, csrfToken)

Proof of Concept

Link image evidence: https://drive.google.com/file/d/1kW_nDsDCOIv6WHrecj0nFBYWrvnqcXBC/view?usp=sharing