CVE-2022-3251

    Dashboard / Vulnerabilities / CVE-2022-3251

    CVE-2022-3251

    Published: 21 Sept 2022Last Modified: 12 Aug 2026

    Summary: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/minarca

    Details: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/minarca prior to 4.2.2.

    References: https://huntr.dev/bounties/b9a1b411-060b-4235-9426-e39bd0a1d6d9, https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/3xxx/CVE-2022-3251.json, https://nvd.nist.gov/vuln/detail/CVE-2022-3251, https://github.com/ikus060/minarca/commit/7b5c7e6cbd59268d5cd4f1b5f42e721db116f71a

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -92d186fb5dc52fbb42c305a6d3ea5ec72901e4fc

    Affected versions

    4.2.1
    4.2.0rc1
    4.2.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-3251 | CVE-DB