CVE-2024-47833
published 2024-10-09CVE-2024-47833: Taipy is an open-source Python library for easy, end-to-end application development for data scientists and machine learning engineers. In affected versions…
PriorityP433medium6.5CVSS 3.1
AVNACLPRNUINSUCLILAN
EPSS
0.25%
16.6th percentile
Taipy is an open-source Python library for easy, end-to-end application development for data scientists and machine learning engineers. In affected versions session cookies are served without Secure and HTTPOnly flags. This issue has been addressed in release version 4.0.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| avaiga | taipy | < 4.0.0 | 4.0.0 |
| avaiga | taipy | >= 0 < 4.0.0 | 4.0.0 |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
nvdv4.06.3MEDIUMCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2024-47833: Taipy is an open-source Python library for easy, end-to-end application development for data scientists and machine learning engineers
osv·2024-10-09
CVE-2024-47833 CVE-2024-47833: Taipy is an open-source Python library for easy, end-to-end application development for data scientists and machine learning engineers
Taipy is an open-source Python library for easy, end-to-end application development for data scientists and machine learning engineers. In affected versions session cookies are served without Secure and HTTPOnly flags. This issue has been addressed in release version 4.0.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
GHSA
Taipy has a Session Cookie without Secure and HTTPOnly flags
ghsa·2024-08-27
CVE-2024-47833 [MEDIUM] CWE-1004 Taipy has a Session Cookie without Secure and HTTPOnly flags
Taipy has a Session Cookie without Secure and HTTPOnly flags
### Summary
Session cookie is without Secure and HTTPOnly flags.
### Details
Please take a look at this part of code (PoC screenshot) or check code directly (provided in Occurrences section below)
**Occurrences**:
https://github.com/Avaiga/taipy/blob/develop/frontend/taipy-gui/src/components/Taipy/Navigate.tsx#L67
**Proposed remediation:** add Secure and HTTPOnly flags for cookies.
It could be like this:
document.cookie = `tprh=${tprh};path=/;Secure;HttpOnly;`;
### PoC
**Screenshot**:
### Impact
**Secure**: This flag indicates that the cookie should only be sent over secure HTTPS connections. Without this flag, the cookie will be sent over both HTTP and HTTPS connections, which could expose it to interception or tamperin
OSV
Taipy has a Session Cookie without Secure and HTTPOnly flags
osv·2024-08-27
CVE-2024-47833 [MEDIUM] Taipy has a Session Cookie without Secure and HTTPOnly flags
Taipy has a Session Cookie without Secure and HTTPOnly flags
### Summary
Session cookie is without Secure and HTTPOnly flags.
### Details
Please take a look at this part of code (PoC screenshot) or check code directly (provided in Occurrences section below)
**Occurrences**:
https://github.com/Avaiga/taipy/blob/develop/frontend/taipy-gui/src/components/Taipy/Navigate.tsx#L67
**Proposed remediation:** add Secure and HTTPOnly flags for cookies.
It could be like this:
document.cookie = `tprh=${tprh};path=/;Secure;HttpOnly;`;
### PoC
**Screenshot**:
### Impact
**Secure**: This flag indicates that the cookie should only be sent over secure HTTPS connections. Without this flag, the cookie will be sent over both HTTP and HTTPS connections, which could expose it to interception or tamperin
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
CWE
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
mitre_cwe·CVSS 2.1
[LOW] CWE-614 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CWE-614: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
The Secure attribute for sensitive cookies in HTTPS sessions is not set.
Modes of Introduction:
Phase: Implementation
Common Consequences:
Scope: Confidentiality. Impact: Read Application Data. Omitting the secure flag makes it possible for the user agent to send the cookies in plaintext over an HTTP session.
Detection Methods:
Automated Static Analysis: Automated static analysis, commonly referred to as Static Application Security Testing (SAST), can find some instances of this weakness by analyzing source code (or binary/compiled code) without having to execute it. Typically, this is done by building a model of data flow and control flow, then searching for potentially-vulnerable patterns that connect "sources" (or
CWE
Sensitive Cookie Without 'HttpOnly' Flag
mitre_cwe
CWE-1004 Sensitive Cookie Without 'HttpOnly' Flag
CWE-1004: Sensitive Cookie Without 'HttpOnly' Flag
The product uses a cookie to store sensitive information, but the cookie is not marked with the HttpOnly flag.
The HttpOnly flag directs compatible browsers to prevent client-side script from accessing cookies. Including the HttpOnly flag in the Set-Cookie HTTP response header helps mitigate the risk associated with Cross-Site Scripting (XSS) where an attacker's script code might attempt to read the contents of a cookie and exfiltrate information obtained. When set, browsers that support the flag will not reveal the contents of the cookie to a third party via client-side script executed via XSS.
Background: An HTTP cookie is a small piece of data attributed to a specific website and stored on the user's computer by the user's web browse
2024-10-09
Published