Lucene search
PRIOn knowledge basePRION:CVE-2023-28472HistoryApr 28, 2023 - 2:15 p.m.
Code injection
2023-04-2814:15:00
PRIOn knowledge base
www.prio-n.com
2
code injection
concrete cms
security attribute
http only
ccmpoll cookies
nvd
Concrete CMS (previously concrete5) versions 8.5.12 and below, and 9.0 through 9.1.3 does not have Secure and HTTP only attributes set for ccmPoll cookies.
| CPE | Name | Operator | Version |
|---|---|---|---|
| concrete_cms | lt | 9.2.0 |
Related
github
github
Concrete CMS missing secure cookie parameters
2023-04-28 15:30:18
osv
osv
Concrete CMS missing secure cookie parameters
2023-04-28 15:30:18
cvelist
cvelist
CVE-2023-28472
2023-04-28 00:00:00
veracode
veracode
Insecure Cookies
2023-05-22 08:24:43
cve
cve
CVE-2023-28472
2023-04-28 14:15:10
nvd
nvd
CVE-2023-28472
2023-04-28 14:15:10