CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Jonk @ Follow me Darling Cookies and Content Security Policy.This issue affects Cookies and Content Security Policy: from n/a through 2.15.
Explanation of Vulnerability in Simple Terms
Cookies and Content Security Policy versions up to 2.15 expose sensitive information that can be read over the network without authentication. An attacker can retrieve limited confidential data by sending a network request to the affected component. The vulnerability does not allow modification or disruption of service. Update to a version newer than 2.15.
What an attacker can do
Read sensitive information from the site without logging in.
Potential impact on your site
Confidential data may be exposed to unauthenticated visitors; integrity and availability are not affected.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
