Skip to content
OpenAdvisories

Weakness (CWE)

CWE-315: Cleartext Storage of Sensitive Information in a Cookie

Variant Draft

The product stores sensitive information in cleartext in a cookie.

Source: MITRE CWE-315

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.7
    CVE-2025-8528

    Exrick xboot getMenuList sensitive information in a cookie

    A vulnerability classified as problematic has been found in Exrick xboot up to 3.3.4. Affected is an unknown function of the file /xboot/permission/getMenuList. The manipulation leads to cleartext storage of sensitive information in a cookie. It is possible t…

    Exrick xboot
  • Low 3.1
    CVE-2025-4537

    yangzongzhuan RuoYi-Vue Password login.vue sensitive information in a cookie

    A vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.8.9 and classified as problematic. Affected by this issue is some unknown functionality of the file ruoyi-ui/jsencrypt.js and ruoyi-ui/login.vue of the component Password Handler. The manipulation l…

    yangzongzhuan RuoYi-Vue
  • Low 3.2
    GHSA-j4g3-3q8x-jxqp

    dbt-core's secret env vars written to package-lock.json in plaintext

    ### Impact When used to pull source code from a private repository using a Personal Access Token (PAT), some versions of dbt-core write a URL with the PAT in plaintext to the `package-lock.yml` file. ### Patches The bug has been fixed in [dbt-core v1.7.3](htt…

    dbt-core PyPI