An open API service providing security vulnerability metadata for many open source software ecosystems.
Security Advisories: GSA_kwCzR0hTQS1weDhoLTZxeHYtbTIycc4AAxpo
Incorrect parsing of nameless cookies leads to __Host- cookies bypass
Browsers may allow "nameless" cookies that look like
=value instead of
key=value. A vulnerable browser may allow a compromised application on an adjacent subdomain to exploit this to set a cookie like
=__Host-test=bad for another subdomain.
Werkzeug <= 2.2.2 will parse the cookie
__Host-test=bad. If a Werkzeug application is running next to a vulnerable or malicious subdomain which sets such a cookie using a vulnerable browser, the Werkzeug application will see the bad cookie value but the valid cookie key.
Source: GitHub Advisory Database
Published: 4 months ago
Updated: 3 months ago
CVSS Score: 2.6
CVSS vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
Identifiers: GHSA-px8h-6qxv-m22q, CVE-2023-23934
pypi:WerkzeugVersions: < 2.2.3
Fixed in: 2.2.3