Common Weakness Enumeration

    CWE Definition / CWE-784

    CWE-784: Reliance on Cookies without Validation and Integrity Checking in a Security Decision

    The product uses a protection mechanism that relies on the existence or values of a cookie, but it does not properly ensure that the cookie is valid for the associated user.

    Published:16 Jul 2009
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-807: Reliance on Untrusted Inputs in a Security Decision

    CWE-565: Reliance on Cookies without Validation and Integrity Checking