CVE-2023-5866

MEDIUM6.3EPSS 0.03%

Sensitive cookie in HTTPS session without 'Secure' attribute in thorsten/phpmyfaq

發布日:2023/10/31修改日:2024/2/16

也稱為:GHSA-34w4-wrqp-j47g

描述

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.2.1.

受影響套件(1)

Packagist/thorsten/phpmyfaqfrom 0, < 3.2.1

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	MEDIUM6.3	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

參考連結(4)