Common Weakness Enumeration
CWE-784 Reliance on Cookies without Validation and Integrity Checking in a Security Decision
Description
The product uses a protection mechanism that relies on the existence or values of a cookie, but it does not properly ensure that the cookie is valid for the associated user.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-784 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-j6w9-fv6q-3q52 | CVE-2020-8184 | HIGH |
Rack allows Percent-encoded cookies to overwrite existing prefixed cookie names |
2023-08-28 |