medium5.3
CVE-2023-41908
Cerebrate before 1.15 lacks the Secure attribute for the session cookie.
Impact
Cerebrate before 1.15 lacks the Secure attribute for the session cookie.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cerebrate-Project | Cerebrate | before 1.15 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/cerebrate-project/cerebrate/commit/9be81055651649658243b5aa274b175064bfc6db
- https://github.com/cerebrate-project/cerebrate/compare/v1.14...v1.15
- https://github.com/cerebrate-project/cerebrate/commit/9be81055651649658243b5aa274b175064bfc6db
- https://github.com/cerebrate-project/cerebrate/compare/v1.14...v1.15