Lucene search

K

Veracode Vulnerability DatabaseVERACODE:47743

HistoryJun 26, 2024 - 4:03 a.m.

Session Hijacking

2024-06-2604:03:35

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

typo3

cms

session hijacking

vulnerability

cookies

http

cross-site scripting

6.5 Medium

AI Score

Confidence

High

typo3/cms is vulnerable to Session Hijacking. The vulnerability is due to cookies not being hardened to be submitted only via HTTP, which in combination with other vulnerabilities like cross-site scripting can lead to hijacking an active and valid session.

6.5 Medium

AI Score

Confidence

High