Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47055
HistoryMay 20, 2024 - 8:36 a.m.

Deserialization Of Untrusted Data

2024-05-2008:36:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
deserialization
untrusted data
cookie encryption
arbitrary code execution

AI Score

7.5

Confidence

High

illuminate/cookie is vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to insecure cookie encryption and serialization logic, which allows attackers to potentially decrypt or manipulate cookie data, resulting in arbitrary code execution.

AI Score

7.5

Confidence

High