Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in pyload/pyload
CVE-2023-0055

3.1LOW

Key Information:

Vendor
Pyload
Status
Pyload/pyload
Vendor
CVE Published:
4 January 2023

Summary

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository pyload/pyload prior to 0.5.0b3.dev32.

Affected Version(s)

pyload/pyload < 0.5.0b3.dev32

References

https://huntr.dev/bounties/ed88e240-99ff-48a1-bf32-8e1ef5...
https://github.com/pyload/pyload/commit/7b53b8d43c2c072b4...

CVSS V3.1

Score:
3.1
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

CVSS V3.0

Score:
3.1
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.