Unscored CVE-2014-3852 EUVD-2014-3789GHSA-cwj8-hfgh-f4wm

Pyplate 0.08 does not include the HTTPOnly flag in a Set-Cookie header for the id cookie, which makes it easier for remote attackers to obt…

Published Aug 7, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

Pyplate 0.08 does not include the HTTPOnly flag in a Set-Cookie header for the id cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.

References

[oss-security] 20140523 Re: CVE request: Pyplate multiple vulnerabilities mailing-list
[oss-security] 20140514 CVE request: Pyplate multiple vulnerabilities mailing-list