Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2023-28472

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-f55r-8rcv-mqcf

Concrete CMS missing secure cookie parameters Concrete CMS (previously concrete5) before 9.2 does not have Secure and HTTP only attributes set for ccmPoll cookies.

gitlab/packagist/concrete5/concrete5/CVE-2023-28472

Missing secure cookie parameters Concrete CMS (previously concrete5) before 9.2 does not have Secure and HTTP only attributes set for ccmPoll cookies.