CVE-2014-6028

TorrentFlux 2.4 allows remote authenticated users to obtain other users' cookies via the cid parameter in an editCookies action to profile.php

published September 5, 2014

CVSS
—
EPSS
2%
Percentile
77.1
In the wild
Unconfirmed
What it is

TorrentFlux 2.4 allows remote authenticated users to obtain other users' cookies via the cid parameter in an editCookies action to profile.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01706 · 77.1th percentile
Published
2014-09-05T14:00Z
EPSS history
Timeline
  • 05 SEP 14:00Z
    TorrentFlux 2.4 allows remote authenticated users to obtain other users' cookies via the cid parameter in an editCookies action to profile.php
    cvelistv5