1 matches found
Cookie Attribute Injection
undici is vulnerable to cookie attribute injection. The vulnerability is due to insufficient sanitization of cookie domain and unparsed values in setCookie, allowing attacker-controlled input to inject or override cookie attributes such as SameSite, Secure, and HttpOnly, potentially weakening...
6.5CVSS7.1AI score0.00167EPSS
SaveExploits0References4Affected Software1
20