PT-2020-7458 · Unknown · Projectpier
Published
2020-02-07
·
Updated
2020-05-06
·
CVE-2013-3637
CVSS v2.0
3.5
Low
| Vector | AV:N/AC:M/Au:S/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions:
ProjectPier version 0.8.8
Description:
The issue is related to the insecure use of cookies. ProjectPier 0.8.8 does not set the Secure flag for cookies, which could potentially expose sensitive information.
Recommendations:
For ProjectPier version 0.8.8, consider updating the cookie settings to include the Secure flag to prevent potential information exposure.
Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Projectpier