CVE-2017-1000046

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Mautic 2.6.1 and earlier fails to set flags on session cookies

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected software

No affected versions have been published.

Timeline

Published
Jul 17, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-10000479.8rbenv (all current versions) is vulnerable to Directory Traversal in the specification of Ruby version resulting in arbitrary code executionCVE-2017-10000487.5the web framework using ljharb's qs module older than v6.3.2, v6.2.3, v6.1.2, and v6.0.4 is vulnerable to a DoS. A malicious user can send aCVE-2017-10000507.5JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check to see if the image contained at leCVE-2017-10000516.1Cross-site scripting (XSS) vulnerability in pad export in XWiki labs CryptPad before 1.1.1 allows remote attackers to inject arbitrary web sCVE-2017-10000527.8Elixir Plug before v1.0.4, v1.1.7, v1.2.3 and v1.3.2 is vulnerable to null byte injection in the Plug.Static component, which may allow userCVE-2017-10000538.1Elixir Plug before v1.0.4, v1.1.7, v1.2.3 and v1.3.2 is vulnerable to arbitrary code execution in the deserialization functions of Plug.SessCVE-2017-10000546.1Rocket.Chat version 0.8.0 and newer is vulnerable to XSS in the markdown link parsing code for messages.CVE-2017-10000569.8Kubernetes version 1.5.0-1.5.4 is vulnerable to a privilege escalation in the PodSecurityPolicy admission plugin resulting in the ability toCVE-2017-10000586.1Stored XSS vulnerabilities in chevereto CMS before version 3.8.11, one in the user profile and one in the Exif data parser.CVE-2017-10000596.1Live Helper Chat version 2.06v and older is vulnerable to Cross-Site Scripting in the HTTP Header handling resulting in the execution of anyCVE-2017-10000609.8EyesOfNetwork (EON) 5.1 Unauthenticated SQL Injection in eonweb leading to remote rootCVE-2017-10000617.1xmlsec 1.2.23 and before is vulnerable to XML External Entity Expansion when parsing crafted input documents, resulting in possible informat
CVE-2017-1000046: High severity, CVSS 7.5 | Vulnix