Session Cookie Vulnerability in Cerebrate by Cerebrate Project

CVE-2023-41908

What is CVE-2023-41908?

Cerebrate versions prior to 1.15 are vulnerable to a security flaw wherein the session cookie lacks the Secure attribute. This oversight can potentially expose users to session hijacking attacks, as the cookie may be transmitted over unencrypted connections. It is crucial for users of affected versions to upgrade to 1.15 or later to mitigate this risk and ensure enhanced session security.

References