Code injection

2019-12-3017:15:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.9%

MFScripts YetiShare 3.5.2 through 4.5.3 does not set the Secure flag on session cookies, allowing the cookie to be sent over cleartext channels.

CPENameOperatorVersion
yetisharege3.5.2
yetisharele4.5.3

CPE	Name	Operator	Version
	yetishare	ge	3.5.2
	yetishare	le	4.5.3

References

medium.com/@jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459