Cookie Values Used in Anti-CSRF Token
Severity:
Low
Summary
Invicti identified a cookie used as Anti-CSRF Token.
Impact
During a cross-site scripting attack, an attacker might easily access cookies and hijack the victim's session even if cookie is marked as HttpOnly. If the cookie is not the session cookie you can ignore this issue.
Remediation
Avoid the usage of session cookie as Anti-CSRF Token.
Required Skills for Successful Exploitation
Actions To Take
Classifications
Vulnerability Index
You can search and find all vulnerabilities
Select Category
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Build your resistance to threats. And save hundreds of hours each month.
