CWE-565: Reliance on Cookies without Validation and Integrity Checking
The product relies on the existence or values of cookies when performing security-critical operations, but it does not properly ensure that the setting is valid for the associated user.
A kind of CWE-642 External Control of Critical State Data.
From the CWE List. © The MITRE Corporation.
Newest
- jetbrains ktor In JetBrains Ktor before 3.6.1 missing Domain attribute validation in client cookie storage... 3.7 Low
- zitadel ZITADEL 4.0.0 before 4.19.5 Login V2 Account Takeover via Forgeable verificationCheck Cookie 9.1 Critical
- capricorn86 happy-dom Happy DOM: Cookie scope forgery: no DNS-label boundary on Domain= matching , attacker origin sets victim cookies 6.5 Medium
- sunhillo sureline Sunhillo SureLine Authentication Bypass via Session Cookie 9.1 Critical
- aio-libs aiohttp AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies 2.3 Low
- diaple stela Authentication bypass in Stela by Diaple Networking 9.3 Critical
- apache apache-airflow-providers-keycloak, apache software foundation airflow keycloak provider +1 more Apache Airflow Keycloak provider: Keycloak token cookies not bound to Airflow session identity 9.1 Critical
- http4s Http4s: CookieJar middleware matches by substring, leaking cookies cross-origin 6.8 Medium
- http4s Http4s: CookieJar middleware accepts arbitrary Set-Cookie domain 6.8 Medium
- dianping cat CAT through 3.1.0 Session Cookie Forgery via Unkeyed hashCode Checksum 9.3 Critical
- ash-project ash admin AshAdmin cookie reader matches names by substring, enabling actor/session shadowing from a sibling subdomain 8.3 High
- nesquena hermes-webui Hermes WebUI < 0.51.368 - Profile-Scoped Authorization Bypass via Forged hermes_profile Cookie 8.6 High
- concrete cms cms, concretecms concrete cms +1 more Concrete CMS 9.5.0 and below is vulnerable to IDOR in surveys when sites are running concurrent public surveys and private surveys 6.3 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 more PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities 7.8 High
- s9y serendipity Serendipity: Host Header Injection enables authentication cookie scoping to an attacker-controlled domain 6.9 Medium
- rack rack-session Rack::Session::Cookie secrets: decrypt failure fallback enables secretless session forgery and Marshal deserialization 9.3 Critical
- jhimross debugger & troubleshooter Debugger & Troubleshooter <= 1.3.2 - Unauthenticated Privilege Escalation to Administrator via Cookie Manipulation 8.8 High
- miyagawa plack::middleware::session::cookie, plack\ +1 more Plack::Middleware::Session::Cookie versions through 0.21 for Perl allows remote code execution 9.8 Critical
- salihciftci liman Liman 0.7 - Cross-Site Request Forgery (Change Password) 5.1 Medium
- wago 750-8212 pfc200 WAGO 750-8212 PFC200 G2 2ETH RS Privilege Escalation 8.7 High
- njhyst hy511 firmware An issue was discovered in NJHYST HY511 POE core before 2.1 and plugins before 0.1. The... 9.8 Critical
- jayarsiech jay login & register JAY Login & Register <= 2.4.01 - Authentication Bypass via Cookie 9.8 Critical
- commax co., ltd. biometric access control system COMMAX Biometric Access Control System Authentication Bypass 8.7 High
- fortinet fortiweb A reliance on cookies without validation and integrity checking vulnerability in Fortinet... 7.1 High
- brave desktop browser In Brave Browser Desktop versions prior to 1.83.10 that have the split view feature enabled, the ... 6.5 Medium
- microsoft azure playfab Azure PlayFab Elevation of Privilege Vulnerability 8.8 High
- namelessmc nameless NamelessMC Vulnerable to Cookie-Based View Count Manipulation 5.3 Medium
- think tk-rt-wr135g firmware An issue in Think Router Tk-Rt-Wr135G V3.0.2-X000 allows attackers to bypass authentication via a... 8.4 High
- e-excellence u-office force e-Excellence U-Office Force - Improper Authentication 9.8 Critical
- new type flowmaster bpm plus NewType FlowMaster BPM Plus - Privilege Escalation 8.8 High
- dueclic wp 2fa with telegram, authpress +1 more WP 2FA with Telegram <= 3.0 - Two-Factor Authentication Bypass 6.5 Medium
-
github.com/gitpod-io/gitpodGo,github.com/gitpod-io/gitpod/components/server/goGo,github.com/gitpod-io/gitpod/components/ws-proxyGo +1 more +3 more github.com/gitpod-io/gitpod vulnerable to Cookie Tossing 4.1 Medium - ibm datacap, datacap navigator +1 more IBM Datacap Navigator information disclosure 4.3 Medium
- talya informatics elektraweb Cookies Manipulation in Talya Informatics' Elektraweb 9.8 Critical
- ibm cognos controller IBM Cognos Controller information disclosure 4.3 Medium
- electrolink compact dab transmitter, compact fm transmitter, digital fm transmitter +5 more +7 more Electrolink FM/DAB/TV Transmitter Reliance on Cookies without Validation and Integrity Checking 8.7 High
- electrolink compact dab transmitter, compact fm transmitter, digital fm transmitter +5 more +7 more Electrolink FM/DAB/TV Transmitter Reliance on Cookies without Validation and Integrity Checking 8.7 High
- ruijie rg-nbr700gw firmware Ruijie RG-NBR700GW 10.3(4b12) router lacks cookie verification when resetting the password,... 9.8 Critical
- jupyter jupyterhub XSS in JupyterHub via Self-XSS leveraged by Cookie Tossing 8.1 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 more Set-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an... 6.1 Medium
- zabbix frontend, zabbix, zabbix server +2 more Leak of zbx_session cookie when using a scheduled report that includes a dashboard with a URL widget. 9.6 Critical
- gofiber fiber CSRF Token Validation Vulnerability in fiber 8.6 High
- gofiber fiber CSRF Token Reuse Vulnerability in fiber 10.0 Critical
- socomec modulys gp (mod3gp-sy-120k), modulys gp firmware +1 more Socomec MOD3GP-SY-120K Reliance on Cookies without Validation and Integrity Checking 10.0 Critical
- cloudflare warp, warp client +1 more Insufficient Validation on Override Codes for Always-Enabled WARP Mode 5.5 Medium
- wavlink wl-wn531ax2, wl-wn531ax2 firmware +1 more Client-side enforcement of server-side security issue exists in WL-WN531AX2 firmware versions... 7.2 High
- mgt-commerce cloudpanel CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication. 9.8 Critical
- tmt lockcell, tmtmakine lockcell firmware +1 more Authentication Bypass in TMT's Lockcell 9.8 Critical
- landis+gyr e850 (zmq200), landisgyr e850 firmware +1 more All versions of Landis+Gyr E850 (ZMQ200) are vulnerable to CWE-784: Reliance on Cookies Without... 3.9 Low
- ucms project ucms UCMS v1.6.0 contains an authentication bypass vulnerability which is exploited via cookie poisoning. 9.8 Critical
- Show olderLoading…