CVE-2020-15128

CVE-2020-15128 affects OctoberCMS prior to version 1.0.468. The root cause is that encrypted cookie values were not bound to the cookie name, enabling scenarios where untrusted user input stored in a cookie could be misused as other cookies or where plaintext cookie content could be fed back for ...