Sensitive Cookie Without HttpOnly and Secure Flag

2022-05-1301:40:54

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.8%

JSON

Mautic prior to 2.1.1 fails to set flags on session cookies

CPENameOperatorVersion
mautic/coreeq1.4.0
mautic/coreeq2.0.1
mautic/coreeq1.3.0
mautic/coreeq1.0.0-rc4
mautic/coreeq1.2.3
mautic/coreeq1.0.1
mautic/coreeq1.0.0-beta
mautic/coreeq1.0.0-rc3
mautic/coreeq1.3.1
mautic/coreeq1.1.2

Name	Operator	Version
mautic/core	eq	1.4.0
mautic/core	eq	2.0.1
mautic/core	eq	1.3.0
mautic/core	eq	1.0.0-rc4
mautic/core	eq	1.2.3
mautic/core	eq	1.0.1
mautic/core	eq	1.0.0-beta
mautic/core	eq	1.0.0-rc3
mautic/core	eq	1.3.1
mautic/core	eq	1.1.2