CVE-2022-4630

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Sensitive Cookie Without 'HttpOnly' Flag in GitHub repository lirantal/daloradius prior to master.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-1004CWE-732

Affected software

VendorProductVersions
lirantallirantal/daloradius>= unspecified, < master

References

Timeline

Published
Dec 21, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-463005.5Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.CVE-2022-463014.4Improper Initialization for some Intel Unison software may allow a privileged user to potentially enable denial of service via local access.CVE-2022-463028.8Broad access controls could allow site users to directly interact with the system Apache installation when providing the reverse proxy confiCVE-2022-463037.5Command injection in SMS notifications in Tribe29 Checkmk <= 2.1.0p10, Checkmk <= 2.0.0p27, and Checkmk <= 1.6.0p29 allows an attacker with CVE-2022-463048.8ChangingTec ServiSign component has insufficient filtering for special characters in the connection response parameter. An unauthenticated rCVE-2022-463056.5ChangingTec ServiSign component has a path traversal vulnerability. An unauthenticated LAN attacker can exploit this vulnerability to bypassCVE-2022-463067.8ChangingTec ServiSign component has a path traversal vulnerability due to insufficient filtering for special characters in the DLL file pathCVE-2022-463078.8SGUDA U-Lock central lock control service’s lock management function has incorrect authorization. A remote attacker with general privilege cCVE-2022-463088.8SGUDA U-Lock central lock control service’s user management function has incorrect authorization. A remote attacker with general user privilCVE-2022-463096.5Vitals ESP upload function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability CVE-2022-46316.1A vulnerability, which was classified as problematic, was found in WP-Ban. Affected is an unknown function of the file ban-options.php. The CVE-2022-463107.5The TelephonyProvider module has a vulnerability in obtaining values.Successful exploitation of this vulnerability may affect data confident
CVE-2022-4630: Medium severity, CVSS 5.3 | Vulnix