golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect

A flaw was found in Go's net/http/cookiejar standard library package. When following an HTTP redirect to a domain that is not a subdomain match or an exact match of the initial domain, an http.Client does not forward sensitive headers such as "Authorization" or "Cookie". For example, a redirect...

python-urllib3: Cookie request header isn't stripped during cross-origin redirects

A flaw was found in urllib3, a user-friendly HTTP client library for Python. urllib3 doesn't treat the Cookie HTTP header special or provide any helpers for managing cookies over HTTP, which is the responsibility of the user. However, it is possible for a user to specify a Cookie header and...

CVE-2024-34274

OpenBD 20210306203917-6cbe797 is vulnerable to Deserialization of Untrusted Data. The cookies bdglobals and bdclientspot of the OpenBD software uses serialized data, which can be used to execute arbitrary code on the system. NOTE: This vulnerability only affects products that are no longer...

CVE-2024-34274

OpenBD 20210306203917-6cbe797 is vulnerable to Deserialization of Untrusted Data. The cookies bdglobals and bdclientspot of the OpenBD software uses serialized data, which can be used to execute arbitrary code on the system. NOTE: This vulnerability only affects products that are no longer...

CVE-2024-34274

OpenBD CVE-2024-34274 affects OpenBD version 20210306203917-6cbe797. Deserialization of untrusted data in cookies bdglobals and bdclient_spot allows arbitrary code execution on the system. The vulnerability targets cookies that store serialized data. The issue is noted to affect products no longe...

PT-2024-25777 · Openbsd · Openbsd

Name of the Vulnerable Software and Affected Versions: OpenBD version 20210306203917-6cbe797 Description: The issue concerns the deserialization of untrusted data in OpenBD, specifically affecting the cookies bdglobals and bdclient spot that use serialized data. This can be exploited to execute...

Passbolt Api Retrieval of HTTP-only cookies

Passbolt uses three cookies: a session cookie, a CSRF protection cookie and a cookie to keep track of the multiple-factor authentication process. Both the session cookie and the mfa cookie are properly set HTTP-only to prevent an attacker from retrieving the content of those cookies if they manag...

GHSA-F5PP-PMQ8-GP46 Passbolt Api Retrieval of HTTP-only cookies

Passbolt uses three cookies: a session cookie, a CSRF protection cookie and a cookie to keep track of the multiple-factor authentication process. Both the session cookie and the mfa cookie are properly set HTTP-only to prevent an attacker from retrieving the content of those cookies if they manag...

Cookie Leakage

amphp/artax is vulnerable to Cookie Leakage. The vulnerability is due to cookies being leaked to unauthorized domains, which allows an attacker to manipulate cookies in such a way where cookies of foo.bar.example.com were leaked to foo.bar...

PT-2024-40259 · Passbolt · Passbolt

Name of the Vulnerable Software and Affected Versions: Passbolt affected versions not specified Description: The issue concerns the /auth/verify.json endpoint, which returns a JSON containing the cookies sent in the request. This could allow an attacker who exploits an XSS vulnerability to retrie...

The vulnerability of the displaySettings function in the Cacti network monitoring software allows a hacker to execute cross-site scripting.

The vulnerability of the displaySettings function in the Cacti network monitoring software relates to the failure to take measures to neutralize special elements. Exploiting this vulnerability can allow a malicious actor to execute cross-site scripting using forged cookie files...

The vulnerability of the software for creating local copies of deleted container registry entries, known as the Mirror registry for Red Hat OpenShift, arises from the unencrypted storage of critical information. This vulnerability allows for the creation of session cookie files and unauthorized access to the affected instance of Quay.

The vulnerability of the Mirror registry software for Red Hat OpenShift, which is used to create local copies of deleted container images, is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker to create session cookie files and gain...

CVE-2024-35110

A reflected XSS vulnerability has been found in YzmCMS 7.1. The vulnerability exists in yzmphp/core/class/application.class.php: when logged-in users access a malicious link, their cookies can be captured by an attacker...

CVE-2024-35110

CVE-2024-35110 – YzmCMS 7.1 (yzmphp/core/class/application.class.php) has a reflected XSS flaw that enables an attacker to steal a logged-in user’s cookies when they visit a crafted link. The issue occurs in the application.class.php implementation and is reported across multiple feeds, with Red ...

Session Hijacking

illuminate/auth is vulnerable to Session Hijacking. The vulnerability is due to insecure handling of "remember me" cookies, where previously hijacked cookies would remain valid even after the user's password was reset or they logged out...

EulerOS Virtualization 3.0.6.0 : curl (EulerOS-SA-2024-1677)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions a...

CVE-2024-4993

Vulnerability in SiAdmin 1.1 that allows XSS via the /show.php query parameter. This vulnerability could allow a remote attacker to send a specially crafted URL to an authenticated user and thereby steal their cookie session credentials...

PT-2024-33771 · Siadmin · Siadmin

Name of the Vulnerable Software and Affected Versions: SiAdmin version 1.1 Description: The issue allows a remote attacker to send a specially crafted URL to an authenticated user, potentially stealing their cookie session credentials via XSS. This is achieved through the "/show.php" query...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2024-1647)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SiAdmin 安全漏洞

SiAdmin is an application. A security vulnerability exists in SiAdmin version 1.1, which stems from a cross-site scripting vulnerability that could allow a remote attacker to steal cookie session credentials by sending a specially crafted URL to an authenticated user...