Description
An issue in the index.js decryptCookie function of cookie-encrypter v1.0.1 allows attackers to execute a bit flipping attack.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | cookie-encrypter | <= 1.0.1 | — | GHSA-h63v-hw6g-x8hp |
Critical · 9.1
CVE-2024-53441
EUVD-2024-3476GHSA-h63v-hw6g-x8hp
Bit flip attack vulnerability in cookie-encrypter
Published Dec 9, 2024 · Updated Dec 11, 2024 · Assigned by mitre