Lucene search

K
osvGoogleOSV:GHSA-CG3Q-59W7-RVC2
HistorySep 29, 2021 - 5:12 p.m.

Reliance on Cookies without Validation and Integrity Checking in getgrav/grav

2021-09-2917:12:51
Google
osv.dev
9
grav
vulnerability
cookies
validation
integrity
compromise
domain
session identifiers
software

EPSS

0.001

Percentile

38.8%

grav is vulnerable to Reliance on Cookies without Validation and Integrity Checking. A cookie with an overly broad path can be accessed through other applications on the same domain. Since cookies often carry sensitive information such as session identifiers, sharing cookies across applications can lead a vulnerability in one application to cause a compromise in another.

EPSS

0.001

Percentile

38.8%

Related for OSV:GHSA-CG3Q-59W7-RVC2