Common Weakness Enumeration

CWE-539 Use of Persistent Cookies Containing Sensitive Information

Description

The web application uses persistent cookies, but the cookies contain sensitive information.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-539 ordered by modification date.

2 reviewed records
Advisory ID NVD ID Severity PURLs Summary Last Modified
GHSA-7h2m-m8vj-598h CVE-2026-35192 LOW
pypi/Django

Django Uses Persistent Cookies Containing Sensitive Information

2026-06-05
GHSA-m2qf-hxjv-5gpq CVE-2023-30861 HIGH
pypi/Flask

Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header

 2024-09-20