Vulnerability — CVE-2023-4654

CVE-2023-4654

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2023-4654
Description:: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository instantsoft/icms2 prior to 2.16.1.
Last updated date:: 09/01/2023

Type:: exploit
Confidence:: HIGH
Date of publishing:: 09/01/2023
Reference url to background: https://huntr.dev/bounties/56432a75-af43-4b1a-9307-bd8de568351b