Skip to content
OpenAdvisories

Package · Packagist

passbolt/passbolt_api

7 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 3.7

    Passbolt Api Retrieval of HTTP-only cookies

    Passbolt uses three cookies: a session cookie, a CSRF protection cookie and a cookie to keep track of the multiple-factor authentication process. Both the session cookie and the mfa cookie are properly set HTTP-only to prevent an attacker from retrieving the …