CWE-565.

ZITADEL 4.0.0 before 4.19.5 Login V2 Account Takeover via Forgeable verificationCheck Cookie

• zitadel
• CWE-565

Happy DOM has cookie scope forgery: no DNS-label boundary on Domain= matching , attacker origin sets victim cookies

• CWE-565

<20.14.6 · fixed in 20.14.6

Sunhillo SureLine Authentication Bypass via Session Cookie

• Sunhillo Corporation SureLine
• CWE-565

AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies

• CWE-565

<3.14.4 · fixed in 3.14.4

Authentication bypass in Stela by Diaple Networking

• Diaple Stela
• CWE-565

Apache Airflow Keycloak provider: Keycloak token cookies not bound to Airflow session identity

• Apache Software Foundation Apache Airflow Keycloak provider
• CWE-565

Http4s: CookieJar middleware matches by substring, leaking cookies cross-origin

• CWE-565
• CWE-1275

<0.23.35 · fixed in 0.23.35

Http4s: CookieJar middleware accepts arbitrary Set-Cookie domain

• Authentication bypass
• CWE-565

<0.23.35 · fixed in 0.23.35

CAT through 3.1.0 Session Cookie Forgery via Unkeyed hashCode Checksum

• dianping cat
• CWE-565

AshAdmin cookie reader matches names by substring, enabling actor/session shadowing from a sibling subdomain

• CWE-565

>=0.9.1, <1.3.1 · fixed in 1.3.1

Hermes WebUI < 0.51.368 - Profile-Scoped Authorization Bypass via Forged hermes_profile Cookie

• nesquena hermes-webui
• CWE-565

Concrete CMS is vulnerable to IDOR in surveys

• Broken access control
• CWE-565

<9.5.1 · fixed in 9.5.1

PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities

• Palo Alto Networks Cloud NGFW
• Palo Alto Networks PAN-OS
• CWE-565

Serendipity has a Host Header Injection allows authentication cookie scoping to attacker-controlled domain in functions_config.inc.php

• CWE-565

<2.6.0 · fixed in 2.6.0

Rack::Session::Cookie secrets: decrypt failure fallback enables secretless session forgery and Marshal deserialization

• Authentication bypass
• Insecure deserialization

>=2.0.0, <2.1.2 · fixed in 2.1.2

Debugger & Troubleshooter <= 1.3.2 - Unauthenticated Privilege Escalation to Administrator via Cookie Manipulation

• jhimross Debugger & Troubleshooter
• CWE-565

Plack::Middleware::Session::Cookie versions through 0.21 for Perl allows remote code execution

• MIYAGAWA Plack::Middleware::Session::Cookie
• CWE-565

WAGO 750-8212 PFC200 G2 2ETH RS Privilege Escalation

• WAGO 750-8212 PFC200
• CWE-565

An issue was discovered in NJHYST HY511 POE core before 2.1 and plugins before 0.1.

• CWE-565

JAY Login & Register <= 2.4.01 - Authentication Bypass via Cookie

• jayarsiech JAY Login & Register
• CWE-565

COMMAX Biometric Access Control System Authentication Bypass

• COMMAX Co., Ltd. COMMAX Biometric Access Control System
• CWE-565

Fortinet FortiWeb: A reliance on cookies without validation and integrity checking vulnerability in Fortinet…

• Fortinet FortiWeb
• CWE-565

In Brave Browser Desktop versions prior to 1.83.10 that have the split view feature enabled, the "Open Link in Split View" context menu item did not respect the SameSite cookie attribute.

• Brave Desktop Browser
• CWE-565

Azure PlayFab Elevation of Privilege Vulnerability

• Microsoft Azure PlayFab
• Privilege escalation
• CWE-565

NamelessMC Vulnerable to Cookie-Based View Count Manipulation

• Nameless
• CWE-565

An issue in Think Router Tk-Rt-Wr135G V3.0.2-X000 allows attackers to bypass authentication via a crafted cookie.

• CWE-565

e-Excellence U-Office Force - Improper Authentication

• e-Excellence U-Office Force
• CWE-565

NewType FlowMaster BPM Plus - Privilege Escalation

• NewType FlowMaster BPM Plus
• CWE-565

github.com/gitpod-io/gitpod vulnerable to Cookie Tossing

• CWE-15
• CWE-565

<=0.8.0 · no fixed version yet

Cookies Manipulation in Talya Informatics' Elektraweb

• Talya Informatics Elektraweb
• CWE-565

IBM Cognos Controller information disclosure

• IBM Cognos Controller
• CWE-565

Electrolink FM/DAB/TV Transmitter Reliance on Cookies without Validation and Integrity Checking

• Electrolink Compact DAB Transmitter
• Electrolink Medium DAB Transmitter
• CWE-565

Electrolink FM/DAB/TV Transmitter Reliance on Cookies without Validation and Integrity Checking

• Electrolink Compact DAB Transmitter
• Electrolink Medium DAB Transmitter
• CWE-565

Ruijie RG-NBR700GW 10.3(4b12) router lacks cookie verification when resetting the password, resulting in an administrator password reset vulnerability.

• CWE-565

Cross site scripting (XSS) in JupyterHub via Self-XSS leveraged by Cookie Tossing

• Cross-site scripting (XSS)
• Cross-site request forgery (CSRF)

<4.1.0 · fixed in 4.1.0

Set-Cookie response headers were being incorrectly honored in multipart HTTP responses.

• Mozilla Firefox
• Mozilla Firefox ESR
• CWE-565

Leak of zbx_session cookie when using a scheduled report that includes a dashboard with a URL widget.

• Zabbix
• CWE-565

CSRF token reuse vulnerability in github.com/gofiber/fiber/v2

• Cross-site request forgery (CSRF)
• CWE-20

<2.50.0 · fixed in 2.50.0

Go Fiber CSRF Token Validation Vulnerability

• Cross-site request forgery (CSRF)
• CWE-565

<2.50.0 · fixed in 2.50.0

Socomec MOD3GP-SY-120K Reliance on Cookies without Validation and Integrity Checking

• Socomec MODULYS GP (MOD3GP-SY-120K)
• CWE-565

WAVLINK TECHNOLOGY Ltd. WL-WN531AX2: Client-side enforcement of server-side security issue exists in WL-WN531AX2 firmware…

• WAVLINK TECHNOLOGY Ltd. WL-WN531AX2
• CWE-565

CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.

• CWE-565

ReactPHP's HTTP server parses encoded cookie names so malicious `__Host-` and `__Secure-` cookies can be sent

• CWE-20
• CWE-565

>=0.7.0, <1.7.0 · fixed in 1.7.0

Centreon Does Not Set HTTPOnly Flag

• CWE-565

<=19.04.3 · no fixed version yet

Cookie Prefix Spoofing in CGI::Cookie.parse

• CWE-565

<0.1.0.1 || >=0.2.0, <0.2.1 || >=0.3.0, <0.3.1 · fixed in 0.1.0.1, 0.2.1, 0.3.1

Rails Multisite secure/signed cookies share secrets between sites in a multi-site application

• Information disclosure
• Weak cryptography or TLS

<4.0.0 · fixed in 4.0.0

Reliance on Cookies without Validation and Integrity Checking in getgrav/grav

• CWE-565

<1.7.21 · fixed in 1.7.21

Circutor SGE-PLC1000 improper authentication

• Circutor SGE-PLC1000
• CWE-565

Lack of protection against cookie tossing attacks in fastify-csrf

• Cross-site request forgery (CSRF)
• CWE-565

<3.1.0 · fixed in 3.1.0

Reliance on Cookies without validation in OctoberCMS

• Weak cryptography or TLS
• CWE-565

>=1.0.319, <1.0.468 · fixed in 1.0.468

Moxa OnCell G3100-HSPA Series: A Reliance on Cookies without Validation and Integrity Checking issue was discovered in…

• Moxa OnCell G3100-HSPA Series
• CWE-565