Vulnerability in Jshttp Cookie
CVE-2024-47764
cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could b…
EPSS: 0.007 (50.3th percentile) — read the EPSS interpretation.
Affected products
- Jshttp Cookie — versions < 0.7.0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
Frequently asked questions
- What is CVE-2024-47764?
- CVE-2024-47764 is a vulnerability in Jshttp Cookie, classified under Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection). Published 2024-10-04.
- Is CVE-2024-47764 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.