WS-2023-0040

Date: January 20, 2023

Cookie without “Secure “ and “ HttpOnly ” flag attribute exists in unilogies/bumsys. The " Secure flag "ensures that the cookie is only sent over a secure (HTTPS) connection, while the "Httponly flag" prevents the cookie from being accessed by JavaScript, which helps to protect against XSS attacks. Without these flags, an attacker may be able to intercept and steal the cookie, which could be used to gain unauthorized access to a user's account.

Language: PHP