Lucene search
+L

102 matches found

UbuntuCve
UbuntuCve
•added 2022/12/30 12:15 p.m.•28 views

CVE-2018-25060

A vulnerability was found in Macaron csrf and classified as problematic. Affected by this issue is some unknown functionality of the file csrf.go. The manipulation of the argument Generate leads to sensitive cookie without secure attribute. The attack may be launched remotely. The complexity of a...

7.5CVSS5.5AI score0.00543EPSS
SaveExploits0References2
Prion
Prion
•added 2022/12/30 12:15 p.m.•18 views

Design/Logic Flaw

A vulnerability was found in Macaron csrf and classified as problematic. Affected by this issue is some unknown functionality of the file csrf.go. The manipulation of the argument Generate leads to sensitive cookie without secure attribute. The attack may be launched remotely. The complexity of a...

5CVSS7.4AI score0.00543EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2022/12/30 11:47 a.m.•54 views

CVE-2018-25060 Macaron csrf csrf.go missing secure attribute

A vulnerability was found in Macaron csrf and classified as problematic. Affected by this issue is some unknown functionality of the file csrf.go. The manipulation of the argument Generate leads to sensitive cookie without secure attribute. The attack may be launched remotely. The complexity of a...

3.7CVSS7.5AI score0.00543EPSS
SaveExploits0References4
CVE
CVE
•added 2022/12/30 11:47 a.m.•122 views

CVE-2018-25060

CVE-2018-25060 affects the Macaron csrf component (go-macaron/csrf) via the csrf.go Generate path. Affects cookies created by Generate: the Secure attribute is not applied, allowing cookies to be sent over non-SSL connections. The vulnerability can be exploited remotely; the attack complexity is ...

7.5CVSS5.6AI score0.00543EPSS
SaveExploits0References4Affected Software1
Mend
Mend
•added 2022/12/30 11:47 a.m.•10 views

CVE-2018-25060

A vulnerability was found in Macaron csrf and classified as problematic. Affected by this issue is some unknown functionality of the file csrf.go. The manipulation of the argument Generate leads to sensitive cookie without secure attribute. The attack may be launched remotely. The complexity of a...

7.5CVSS0.00543EPSS
SaveExploits0References7
Debian CVE
Debian CVE
•added 2022/12/30 11:47 a.m.•99 views

CVE-2018-25060

Removed by vendor...

7.5CVSS6.2AI score0.00543EPSS
SaveExploits0
CNNVD
CNNVD
•added 2022/12/30 12:00 a.m.•22 views

Macaron CSRF security vulnerability

Macaron csrf is a Macaron open source middleware for generating and verifying csrf tokens for Macaron. Macaron csrf has a security vulnerability that stems from a misuse of the parameter Generate that results in a sensitive cookie without security attributes...

7.5CVSS5.5AI score0.00543EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/30 12:00 a.m.•5 views

CVE-2018-25060: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

A vulnerability was found in Macaron csrf and classified as problematic. Affected by this issue is some unknown functionality of the file csrf.go. The manipulation of the argument Generate leads to sensitive cookie without secure attribute. The attack may be launched remotely. The complexity of a...

7.5CVSS4.8AI score0.00543EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/12/30 12:00 a.m.•9 views

PT-2022-8070 · Unknown +1 · Macaron Csrf +1

Name of the Vulnerable Software and Affected Versions: Macaron csrf affected versions not specified Description: A vulnerability was found in Macaron csrf, classified as problematic. It affects some unknown functionality of the file csrf.go. The manipulation of the argument Generate leads to...

7.5CVSS4.5AI score0.00543EPSS
SaveExploits0References19
RedhatCVE
RedhatCVE
•added 2022/12/26 5:04 a.m.•27 views

CVE-2020-36627

A flaw was found in Macaron i18n. The affected version of this package is vulnerable to open redirect attacks...

5.5CVSS4.7AI score0.00642EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2022/12/25 12:30 p.m.•32 views

Macaron i18n Open Redirect vulnerability

A vulnerability was found in Macaron i18n. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file i18n.go. The manipulation leads to open redirect. The attack can be launched remotely. Upgrading to version 0.5.0 can address this issue. The name...

6.1CVSS6.3AI score0.00642EPSS
SaveExploits0References6Affected Software1
osv_ghsa
osv_ghsa
•added 2022/12/25 12:30 p.m.•21 views

GHSA-JWRV-X6RX-8VFM Macaron i18n Open Redirect vulnerability

A vulnerability was found in Macaron i18n. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file i18n.go. The manipulation leads to open redirect. The attack can be launched remotely. Upgrading to version 0.5.0 can address this issue. The name...

6.1CVSS5.8AI score0.00642EPSS
SaveExploits0References6
osv_debian
osv_debian
•added 2022/12/25 11:15 a.m.•16 views

DEBIAN-CVE-2020-36627

A vulnerability was found in Macaron i18n. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file i18n.go. The manipulation leads to open redirect. The attack can be launched remotely. Upgrading to version 0.5.0 is able to address this issue. T...

6.1CVSS4.4AI score0.00642EPSS
SaveExploits0References1
NVD
NVD
•added 2022/12/25 11:15 a.m.•28 views

CVE-2020-36627

A vulnerability was found in Macaron i18n. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file i18n.go. The manipulation leads to open redirect. The attack can be launched remotely. Upgrading to version 0.5.0 is able to address this issue. T...

6.1CVSS0.00642EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2022/12/25 11:15 a.m.•25 views

CVE-2020-36627

A vulnerability was found in Macaron i18n. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file i18n.go. The manipulation leads to open redirect. The attack can be launched remotely. Upgrading to version 0.5.0 is able to address this issue. T...

6.1CVSS6.3AI score
SaveExploits0References3
Prion
Prion
•added 2022/12/25 11:15 a.m.•25 views

Open redirect

A vulnerability was found in Macaron i18n. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file i18n.go. The manipulation leads to open redirect. The attack can be launched remotely. Upgrading to version 0.5.0 is able to address this issue. T...

5.8CVSS6.2AI score0.00642EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
•added 2022/12/25 11:15 a.m.•25 views

CVE-2020-36627

A vulnerability was found in Macaron i18n. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file i18n.go. The manipulation leads to open redirect. The attack can be launched remotely. Upgrading to version 0.5.0 is able to address this issue. T...

6.1CVSS5.6AI score0.00642EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2022/12/25 11:15 a.m.•15 views

UBUNTU-CVE-2020-36627

A vulnerability was found in Macaron i18n. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file i18n.go. The manipulation leads to open redirect. The attack can be launched remotely. Upgrading to version 0.5.0 is able to address this issue. T...

6.1CVSS4.8AI score0.00642EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2022/12/25 10:19 a.m.•48 views

CVE-2020-36627

Removed by vendor...

6.1CVSS6.1AI score0.00642EPSS
SaveExploits0
CVE
CVE
•added 2022/12/25 10:19 a.m.•104 views

CVE-2020-36627

CVE-2020-36627 affects Macaron i18n (i18n.go) where an open redirect is possible due to vulnerable functionality. The issue is exploitable remotely; upgrading to version 0.5.0 addresses it. The patch is identified by the commit 329b0c4844cc16a5a253c011b55180598e707735 (VDB-216745). Multiple sourc...

6.1CVSS5.8AI score0.00642EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder