Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:39113
HistoryFeb 03, 2023 - 10:07 p.m.

Use-After Free

2023-02-0322:07:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
python
django
horizon
vulnerability
use-after free
permission assignment
session cookies
httponly
horizonsecurecookies
environmental files

EPSS

0.001

Percentile

31.3%

python-django-horizon is vulnerable to Use-After Free. An Incorrect Permission Assignment for Critical Resource flaw allows Horizon session cookies to be created without the HttpOnly flag despite HorizonSecureCookies being set to true in the environmental files.

EPSS

0.001

Percentile

31.3%