Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2024/11/17 10:21 a.m.43 views

CVE-2023-4639 Undertow: cookie smuggling/spoofing

A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof arbitrary additional cookie values, leading to unauthorized da...

7.4CVSS0.01093EPSS
SaveExploits0References9
Rows per page
Query Builder