Lucene search
Veracode Vulnerability DatabaseVERACODE:32985HistoryNov 16, 2021 - 9:26 a.m.
Insecure Cookies
2021-11-1609:26:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
43.0%
rails_multisite is susceptible to insecure cookie usage. An authenticated remote attacker is able to re-use cookies from rails_multisite across different sites which share the same secret_key_base.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rails_multisite | le | 3.1.0 | |
| rails_multisite | le | 3.1.0 |
Related
nvd
nvd
CVE-2021-41263
2021-11-15 20:15:20
prion
prion
Code injection
2021-11-15 20:15:00
cve
cve
CVE-2021-41263
2021-11-15 20:15:20
osv
osv
Rails Multisite secure/signed cookies share secrets between sites in a multi-site application
2021-11-15 17:54:01
CVE-2021-41263
2021-11-15 20:15:20
github
github
cvelist
cvelist