Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-14849
HistoryDec 12, 2019 - 2:15 p.m.

Cross site scripting

2019-12-1214:15:00
PRIOn knowledge base
www.prio-n.com
4

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.9%

A vulnerability was found in 3scale before version 2.6, did not set the HTTPOnly attribute on the user session cookie. An attacker could use this to conduct cross site scripting attacks and gain access to unauthorized information.

CPENameOperatorVersion
3scalelt2.6

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.9%

Related for PRION:CVE-2019-14849