Common Weakness Enumeration

CWE-315 Cleartext Storage of Sensitive Information in a Cookie

Description

The product stores sensitive information in cleartext in a cookie.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-315 ordered by modification date.

2 reviewed records
Advisory ID NVD ID Severity PURLs Summary Last Modified
GHSA-9xfw-jjq2-7v8h CVE-2024-24768 LOW
golang/github.com/1Panel-dev/1Panel

1Panel set-cookie is missing the Secure keyword

 2025-01-20
GHSA-j4g3-3q8x-jxqp - LOW
pypi/dbt-core

dbt-core's secret env vars written to package-lock.json in plaintext

 2023-12-08