CVE-2017-1000046
1 advisory.
Packagist/mautic/core CVE-2017-1000046: high 7.5, EPSS 1.11%
Sensitive Cookie Without HttpOnly and Secure Flag
Action: Upgrade mautic/core to 2.1.1 or later.
composer require mautic/core:2.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.1 | - |
Fixed versions
| 2.1.1 |
Sources
- osv: GHSA-8255-qf34-44mp
- https://nvd.nist.gov/vuln/detail/CVE-2017-1000046
- https://github.com/mautic/mautic/issues/1969
- https://github.com/mautic/mautic/pull/2311
- https://github.com/mautic/mautic/pull/2311/commits/f9e7981f4acf0d37fd935c9b9d5d09d7e1a49bc6
- https://github.com/mautic/mautic
- https://www.trustmatta.com/advisories/MATTA-2017-002.txt
CVE-2017-1000046 · published · modified · JSON