Sensitive Cookie Vulnerability in Textpattern CMS by Textpattern
CVE-2021-40642
4.3MEDIUM
What is CVE-2021-40642?
The Textpattern CMS versions up to 4.8.7 exhibit a vulnerability stemming from the lack of a secure flag on the txp_login session cookie found in textpattern/lib/txplib_misc.php. This oversight allows the cookie to be transmitted in clear text when users navigate to unsecured HTTP URLs. Attackers could exploit this issue by tricking users into visiting crafted links, potentially exposing their session data and facilitating unauthorized access to sensitive information.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
References
CVSS V3.1
Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved