CVE-2021-3706

2021-09-1507:15:06

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.9%

JSON

adminlte is vulnerable to Sensitive Cookie Without ‘HttpOnly’ Flag

CPENameOperatorVersion
adminlteeq2.3.1
adminlteeq5.3.1
adminlteeq2.5.1
adminlteeq0.1
adminlteeq2.0.2
adminlteeq2.0.5
adminlteeq1.2
adminlteeq1.1.0
adminlteeq5.4
adminlteeq5.5

Name	Operator	Version
adminlte	eq	2.3.1
adminlte	eq	5.3.1
adminlte	eq	2.5.1
adminlte	eq	0.1
adminlte	eq	2.0.2
adminlte	eq	2.0.5
adminlte	eq	1.2
adminlte	eq	1.1.0
adminlte	eq	5.4
adminlte	eq	5.5

Rows per page:

1-10 of 721

References

github.com/pi-hole/adminlte/commit/cf8602eedd4a31eadb72372fc878c12d342f8600

huntr.dev/bounties/ac7fd77b-b31b-4d02-aebd-f89ecbae3fce