Skip to content
OpenAdvisories
High · 7.5 CVE-2022-3174 EUVD-2022-0229GHSA-mjw4-xvx6-3grgPYSEC-2022-271

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffweb

Published Sep 13, 2022 · Updated Aug 3, 2024 · Assigned by @huntrdev

Vendor: ikus060 Product: ikus060/rdiffweb Package: rdiffweb Ecosystem: PyPI

Description

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2.

Affected products

VendorProductAffectedFixed
ikus060 ikus060/rdiffweb unspecified – < 2.4.2 2.4.2

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI rdiffweb >= 2.4.1, < 2.4.2 2.4.2 GHSA-mjw4-xvx6-3grg
PyPI rdiffweb < 2.4.2 2.4.2 PYSEC-2022-271

Advisories 1

References