Lucene search
+L

1 matches found

OSV
OSV
added 2025/12/09 5:12 p.m.5 views

GHSA-8VCH-M3F4-Q8JF Elysia affected by arbitrary code injection through cookie config

Arbitrary code execution from cookie config. If dynamic cookies are enabled ie there exists a schema for cookies, the cookie config is injected into the compiled route without first being sanitised. Availability of this exploit is generally low, as it requires write access to either the Elysia...

7.5CVSS6.3AI score0.00721EPSS
SaveExploits2References8
Rows per page
Query Builder