CVE-2023-0055 — Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in Pyload

CWE-614 — Sensitive Cookie in HTTPS Session Without 'Secure' AttributeCWE-319 — Cleartext Transmission of Sensitive Info4 documents4 sources
Severity
5.3MEDIUMNVD
EPSS
0.1%
top 65.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Pyload PyloadPyload-ng Project Pyload-ngPyload
Timeline
PublishedJan 4
Latest updateJan 5

Description

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository pyload/pyload prior to 0.5.0b3.dev32.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages3 packages

▶CVEListV5pyload/pyload_pyloadunspecified — 0.5.0b3.dev32
▶PyPIpyload-ng_project/pyload-ng< 0.5.0b3.dev32
▶NVDpyload/pyload0.5.0

Patches

Patch: github.com ↗Patch: huntr.dev ↗Patch: github.com ↗

🔴Vulnerability Details

3
OSV
Pyload contains Sensitive Cookie in HTTPS Session Without 'Secure' Attribute↗2023-01-05
▶
GHSA
Pyload contains Sensitive Cookie in HTTPS Session Without 'Secure' Attribute↗2023-01-05
▶
CVEList
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in pyload/pyload↗2023-01-04
▶
CVE-2023-0055 — Pyload Pyload vulnerability | cvebase