Beveiligingsadvies

CVE-2024-2756

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-04-29 03:34:16

Laatst bijgewerkt 2025-11-04 17:18:00

Toegewezen door php

CVSS-score 6.5

Status PUBLISHED

Beschrijving

Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim's browser which is treated as a __Host- or __Secure- cookie by PHP applications.

← Alle CVE's bekijken Bekijk op cve.org ↗