CVE-2022-3251

Medium

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/minarca prior to 4.2.2.

@huntrdev·CWE-614·Published 2022-09-21

CVSS

5.3

EPSS

0.00

KEV

Exploits

cve.orgen

113 chars

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/minarca prior to 4.2.2.

NVDen

113 chars

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/minarca prior to 4.2.2.

NVDes

140 chars

Una Cookie Confidencial en la sesión HTTPS sin el atributo "Secure" en el repositorio de GitHub ikus060/minarca versiones anteriores a 4.2.2

Version	Type	Source	Base	Exp	Impact	Vector
3.0	Primary	cve.org	7.5	—	—	CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
3.0	Primary	cve.org	7.5	—	—	CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H