5 matches found
CVE-2022-4630
Sensitive Cookie Without 'HttpOnly' Flag in GitHub repository lirantal/daloradius prior to master...
5.3CVSS6.8AI score0.00629EPSS
SaveExploits1References1
CVE-2022-4630
Sensitive Cookie Without 'HttpOnly' Flag in GitHub repository lirantal/daloradius prior to master...
5.3CVSS0.00629EPSS
SaveExploits1References2
CVE-2022-4630
CVE-2022-4630 affects daloradius (GitHub repository lirantal/daloradius) with a missing HttpOnly flag on sensitive cookies prior to the master branch. Root cause: session cookie (PHPSESSID) transmitted without HttpOnly protection, enabling potential access to sensitive data. Documented impact ind...
5.3CVSS5.3AI score0.00629EPSS
SaveExploits1References2Affected Software1
20