3 matches found
CVE-2022-25320
An issue was discovered in Cerebrate through 1.4. Username enumeration could occur.
CVE-2022-25319
An issue was discovered in Cerebrate through 1.4. Endpoints could be open even when not enabled.
CVE-2023-41908
Cerebrate before 1.15 lacks the Secure attribute for the session cookie.