CVE-2022-38846

creationtimestamp| type| source ---|---|--- 2022-12-03 02:48:14+00:00| seen| https://t.me/cibsecurity/49910...

CVE-2022-38846

CVE-2022-38846 affects EspoCRM 7.1.8 with a Missing Secure Flag in cookies, allowing cookies to be sent over HTTP and potentially captured via MITM. Vulnerable component is the cookie security flag handling; impact is exposure of cookies from an insecure channel. The available connected documents...