Vulnerability Details CVE-2023-41908
Cerebrate before 1.15 lacks the Secure attribute for the session cookie.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 22.5%
CVSS Severity
CVSS v3 Score 5.3
References
- https://github.com/cerebrate-project/cerebrate/commit/9be81055651649658243b5aa274b175064bfc6db
- https://github.com/cerebrate-project/cerebrate/compare/v1.14...v1.15
- https://github.com/cerebrate-project/cerebrate/commit/9be81055651649658243b5aa274b175064bfc6db
- https://github.com/cerebrate-project/cerebrate/compare/v1.14...v1.15
Products affected by CVE-2023-41908
-
cpe:2.3:a:cerebrate-project:cerebrate:0.1
-
cpe:2.3:a:cerebrate-project:cerebrate:0.2
-
cpe:2.3:a:cerebrate-project:cerebrate:0.3
-
cpe:2.3:a:cerebrate-project:cerebrate:1.0
-
cpe:2.3:a:cerebrate-project:cerebrate:1.1
-
cpe:2.3:a:cerebrate-project:cerebrate:1.1.1
-
cpe:2.3:a:cerebrate-project:cerebrate:1.10
-
cpe:2.3:a:cerebrate-project:cerebrate:1.11
-
cpe:2.3:a:cerebrate-project:cerebrate:1.12
-
cpe:2.3:a:cerebrate-project:cerebrate:1.13
-
cpe:2.3:a:cerebrate-project:cerebrate:1.14
-
cpe:2.3:a:cerebrate-project:cerebrate:1.2
-
cpe:2.3:a:cerebrate-project:cerebrate:1.3
-
cpe:2.3:a:cerebrate-project:cerebrate:1.4
-
cpe:2.3:a:cerebrate-project:cerebrate:1.5
-
cpe:2.3:a:cerebrate-project:cerebrate:1.6
-
cpe:2.3:a:cerebrate-project:cerebrate:1.7
-
cpe:2.3:a:cerebrate-project:cerebrate:1.8
-
cpe:2.3:a:cerebrate-project:cerebrate:1.9