Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1004: Sensitive Cookie Without 'HttpOnly' Flag

Variant Incomplete

The product uses a cookie to store sensitive information, but the cookie is not marked with the HttpOnly flag.

How to prevent it (1 mitigation)

  1. Implementation

    Leverage the HttpOnly flag when setting a sensitive cookie in a response.

Source: MITRE CWE-1004

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.