high7.5
CVE-2022-4409
phpMyFAQ has insecure HTTP cookies
Impact
phpMyFAQ is contains Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in versions prior to 3.1.9.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | thorsten/phpmyfaq | < 3.1.9 | 3.1.9 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpmyfaq | Phpmyfaq | before 3.1.9 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/thorsten/phpmyfaq/commit/8b47f38
- https://huntr.dev/bounties/5915ed4c-5fe2-42e7-8fac-5dd0d032727c
- https://github.com/advisories/GHSA-wpgc-5cr5-h9gg
- https://nvd.nist.gov/vuln/detail/CVE-2022-4409
- https://github.com/thorsten/phpMyFAQ/commit/c16cc2bbe2687f75aa1204b804483091fae43cba