CVE-2015-2156

Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow…

published October 18, 2017

CVSS
—
EPSS
5%
Percentile
92.4
In the wild
Unconfirmed
What it is

Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow remote attackers to bypass the httpOnly flag on cookies and obtain sensitive information by leveraging improper validation of cookie name and value characters.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05222 · 92.4th percentile
Published
2017-10-18T15:00Z
EPSS history
Timeline
  • 18 OCT 15:00Z
    Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow…
    cvelistv5