Skip to content
OpenAdvisories

Vendor

amauric

13 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 3.1

    tarteaucitron.js before 1.37.0 ReDoS via Unescaped Cookie Name in cookie.purge

    tarteaucitron.js before 1.37.0 contains a regular expression denial of service vulnerability that allows attackers to block visitor pages by supplying unescaped cookie names to cookie.purge. Attackers can plant a cookie from a sibling subdomain or inject a pu…