CVE-2022-4409

Katalog CVE

CVSS 7.5 · High EPSS 0,46%

Kerentanan Sensitive Cookie in HTTPS Session Without 'Secure' Attribute pada phpmyfaq. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.1.9.

Rincian

Terbit di NVD

11 Desember 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-614: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CWE-311: Missing Encryption of Sensitive Data

EPSS (30 hari)

0,46% peluang dieksploitasi; lebih tinggi dari 38,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/thorsten/phpmyfaq/commit/8b47f38 patch · advisory pihak ketiga
• https://huntr.dev/bounties/5915ed4c-5fe2-42e7-8fac-5dd0d032727c exploit · advisory pihak ketiga