CVE-2021-3706CWE-1004

Sensitive Cookie Without 'HttpOnly' Flag in pi-hole/adminlte

High · published September 15, 2021

CVSS v3.0
7.4
EPSS
1%
Percentile
65.4
In the wild
Unconfirmed
What it is

adminlte is vulnerable to Sensitive Cookie Without 'HttpOnly' Flag

The record
Technical detail
CVSS v3.0
7.4 · HIGH
Vector
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01101 · 65.4th percentile
Weakness
CWE-1004 · Sensitive Cookie Without 'HttpOnly' Flag
Published
2021-09-15T06:30Z
EPSS history
Timeline
  • 15 SEP 06:30Z
    Sensitive Cookie Without 'HttpOnly' Flag in pi-hole/adminlte
    cvelistv5