3 matches found
Sensitive Cookie with Improper SameSite Attribute
Overview org.asynchttpclient:async-http-client is a maven plugin for the Async Http Client AHC classes. Affected versions of this package are vulnerable to Sensitive Cookie with Improper SameSite Attribute via improper validation of the Domain attribute in the cookie handling process. An attacker...
6.9CVSS5.9AI score0.00261EPSS
SaveExploits0References2
Design/Logic Flaw
An improper SameSite Attribute vulnerability in pimCore v10.5.15 allows attackers to execute arbitrary code...
6.8CVSS8.9AI score0.00982EPSS
SaveExploits1References2Affected Software1
CVE-2023-25240: Unintended Reentrant Invocation of Non-reentrant Code Via Nested Calls
An improper SameSite Attribute vulnerability in pimCore v10.5.15 allows attackers to execute arbitrary code...
8.8CVSS6.5AI score0.00982EPSS
SaveExploits1References2
20