high7.5
CVE-2021-3706
adminlte is vulnerable to Sensitive Cookie Without 'HttpOnly' Flag
Impact
adminlte is vulnerable to Sensitive Cookie Without 'HttpOnly' Flag
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pi-Hole | Web Interface | before 5.6 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/pi-hole/adminlte/commit/cf8602eedd4a31eadb72372fc878c12d342f8600
- https://huntr.dev/bounties/ac7fd77b-b31b-4d02-aebd-f89ecbae3fce
- https://github.com/pi-hole/adminlte/commit/cf8602eedd4a31eadb72372fc878c12d342f8600
- https://huntr.dev/bounties/ac7fd77b-b31b-4d02-aebd-f89ecbae3fce