PT-2020-16092
CVE-2020-25473
·
تاريخ النشر
2020-11-24
·
تاريخ التحديث
2020-11-30
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
SimplePHPscripts News Script PHP Pro version 2.3
Description
The issue is related to the improper setting of the HttpOnly Flag from Session Cookies. This could potentially allow unauthorized access to session cookies.
Recommendations
For SimplePHPscripts News Script PHP Pro version 2.3, consider updating the session cookie settings to include the HttpOnly Flag to prevent JavaScript access. As a temporary workaround, restrict access to session cookies until a proper fix is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾