CVE-2022-4409: phpMyFAQ has insecure HTTP cookies

December 11, 2022 (updated December 12, 2022)

Sensitive Cookie in HTTPS Session Without ‘Secure’ Attribute in GitHub repository thorsten/phpmyfaq prior to 3.1.9.

References

github.com/advisories/GHSA-wpgc-5cr5-h9gg
github.com/thorsten/phpMyFAQ/commit/c16cc2bbe2687f75aa1204b804483091fae43cba
github.com/thorsten/phpmyfaq/commit/8b47f38
huntr.dev/bounties/5915ed4c-5fe2-42e7-8fac-5dd0d032727c
nvd.nist.gov/vuln/detail/CVE-2022-4409

Code Behaviors & Features

Detect and mitigate CVE-2022-4409 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →