Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/11 12:00 a.m.•9 views

CVE-2026-11956: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

A vulnerability was determined in TwiN gatus 5.36.0. Impacted is the function setSessionCookie of the file security/oidc.go of the component OIDC Session Cookie Handler. Executing a manipulation can lead to sensitive cookie without secure attribute. The attack can be launched remotely. This attac...

6.3CVSS4.7AI score0.00191EPSS
SaveExploits0References3
Rows per page
Query Builder