1 matches found
python-werkzeug: cookie prefixed with = can shadow unprefixed cookie
A flaw was found in python-werkzeug. Browsers may allow "nameless" cookies like =value instead of key=value. A vulnerable browser may allow a compromised application on an adjacent subdomain to exploit this to set a cookie for another subdomain. If a Werkzeug application is running next to a...
3.5CVSS7.1AI score0.00507EPSS
SaveExploits0References7
20