Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:38666
HistoryDec 27, 2022 - 7:21 a.m.

Information Disclosure

2022-12-2707:21:30
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
github
information disclosure
vulnerability
secure cookie
unencrypted requests
http protocol
software

EPSS

0.001

Percentile

31.0%

JSON

github.com/usememos/memos is vulnerable to information disclosure. The vulnerability exists in multiple functions because of missing secure cookie attribute which allows an attacker to send an unencrypted request over the HTTP protocol.

Related

prion 1
osv 3
cve 1
cvelist 1
huntr 1
github 1
nvd 1
prion
prion
Session fixation
2022-12-23 12:15:00
osv
osv
usememos/memos missing Secure cookie attribute
2022-12-23 12:30:25
CVE-2022-4683
2022-12-23 12:15:08
usememos/memos missing Secure cookie attribute in github.com/usememos/memos
2024-08-21 16:03:59
cve
cve
CVE-2022-4683
2022-12-23 12:15:08
cvelist
cvelist
CVE-2022-4683 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in usememos/memos
2022-12-23 00:00:00
huntr
huntr
Cookie without Secure attribute
2022-12-21 06:39:03
github
github
usememos/memos missing Secure cookie attribute
2022-12-23 12:30:25
nvd
nvd
CVE-2022-4683
2022-12-23 12:15:08

EPSS

0.001

Percentile

31.0%

JSON
Related for VERACODE:38666
prion1osv3cve1cvelist1huntr1github1nvd1