Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2024/10/04 8:54 p.m.•47 views

CVE-2024-47764

A flaw was found in the Cookie Node.js module, a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter oth...

3.7CVSS6.2AI score0.00744EPSS
SaveExploits0References6
NVD
NVD
•added 2024/10/04 8:15 p.m.•36 views

CVE-2024-47764

cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter other fields of the cookie. Upgrade to...

6.9CVSS0.00744EPSS
SaveExploits0References3
Mend
Mend
•added 2024/10/04 7:09 p.m.•6 views

CVE-2024-47764

cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter other fields of the cookie. Upgrade to...

6.9CVSS0.00744EPSS
SaveExploits0References7
CVE
CVE
•added 2024/10/04 7:09 p.m.•385 views

CVE-2024-47764

CVE-2024-47764 affects a Node.js cookie parsing/serialization package. The vulnerability arises because the cookie name can be used to influence other cookie fields, potentially yielding an unexpected cookie value; a similar escape can affect path and domain to alter other fields. Public advisori...

6.9CVSS6.5AI score0.00744EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/10/04 7:09 p.m.•40 views

CVE-2024-47764 cookie accepts cookie name, path, and domain with out of bounds characters

cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter other fields of the cookie. Upgrade to...

6.9CVSS6.7AI score0.00744EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/04 12:00 a.m.•2 views

CVE-2024-47764: Improper Neutralization of Special Elements in Output Used by a Downstream Component

cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter other fields of the cookie. Upgrade to...

6.9CVSS6.2AI score0.00744EPSS
SaveExploits0References1
Rows per page
Query Builder