What’s Vulnerable › Vulnerabilities

CVE-2023-0055: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in pyload/pyload

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-01-04 · updated 2026-06-17
• Weakness: CWE-614

Description

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository pyload/pyload prior to 0.5.0b3.dev32.

Affected products

• pyload/pyload: 0.5.0

References

• https://github.com/pyload/pyload/commit/7b53b8d43c2c072b457dcd19c8a09bcfc3721703
• https://huntr.dev/bounties/ed88e240-99ff-48a1-bf32-8e1ef5f13cce
• https://github.com/pyload/pyload/commit/7b53b8d43c2c072b457dcd19c8a09bcfc3721703
• https://huntr.dev/bounties/ed88e240-99ff-48a1-bf32-8e1ef5f13cce

Get alerted when CVE-2023-0055 or the next vulnerability affects your stack