Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2022-3174

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-mjw4-xvx6-3grg

rdiffweb vulnerable to Sensitive Cookie in HTTPS Session Without 'Secure' Attribute rdiffweb version 2.4.1 is vulnerable to Sensitive Cookie in HTTPS Session Without 'Secure' Attribute. This makes it so that a user's cookies can be sent to the server with an unencrypted request over the HTTP protocol. Version 2.4.2 contains a fix for the issue.

gitlab/pypi/rdiffweb/CVE-2022-3174

rdiffweb vulnerable to Sensitive Cookie in HTTPS Session Without 'Secure' Attribute rdiffweb version 2.4.1 is vulnerable to Sensitive Cookie in HTTPS Session Without 'Secure' Attribute. This makes it so that a user's cookies can be sent to the server with an unencrypted request over the HTTP protocol. Version 2.4.2 contains a fix for the issue.

pypa/rdiffweb/PYSEC-2022-271

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2.

pysec/PYSEC-2022-271

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2.