What is GHSA-8255-qf34-44mp?

GHSA-8255-qf34-44mp is a security advisory published by GitHub Security Advisories with High severity. Sensitive Cookie Without HttpOnly and Secure Flag

Which CVE IDs does GHSA-8255-qf34-44mp cover?

GHSA-8255-qf34-44mp covers the following CVE IDs: CVE-2017-1000046. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-8255-qf34-44mp?

GHSA-8255-qf34-44mp has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-8255-qf34-44mp?

GHSA-8255-qf34-44mp affects 1 product, including: composer/mautic/core:\u003c 2.1.1.

GHSA-8255-qf34-44mpHighCVSS 7.5

Sensitive Cookie Without HttpOnly and Secure Flag

Vendor

GitHub Security Advisories

Published

May 13, 2022

Last Modified

April 23, 2024

🔗 CVE IDs covered (1)

CVE-2017-1000046 →

📋 Description

Mautic prior to 2.1.1 fails to set flags on session cookies

🎯 Affected products1

composer/mautic/core:< 2.1.1

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2017-1000046
https://www.trustmatta.com/advisories/MATTA-2017-002.txt
https://github.com/mautic/mautic/issues/1969
https://github.com/mautic/mautic/pull/2311
https://github.com/mautic/mautic/pull/2311/commits/f9e7981f4acf0d37fd935c9b9d5d09d7e1a49bc6
https://github.com/advisories/GHSA-8255-qf34-44mp