1 matches found
Guzzle: Host-only cookie scope is not preserved
Impact In affected versions, CookieJar does not preserve whether a response cookie was set without a Domain attribute or with an empty one. A cookie without Domain is host-only and must be returned only to the exact host that set it. Under current cookie processing rules, an empty Domain value is...
8.2CVSS5.4AI score0.00229EPSS
SaveExploits0References7Affected Software1
20