CVE-2014-3853

CVE-2014-3853 concerns Pyplate 0.08, where the id cookie is not marked as Secure in HTTPS sessions. This can allow remote attackers to capture the cookie by intercepting its transmission in an HTTP (non-HTTPS) session, potentially enabling session-related abuse. The provided documents identify th...