Get a demo
AppSec with Zero Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo

Cookie Values Used in Anti-CSRF Token

Severity: Low
Summary#

Invicti identified a cookie used as Anti-CSRF Token.

Impact#
During a cross-site scripting attack, an attacker might easily access cookies and hijack the victim's session even if cookie is marked as HttpOnly. If the cookie is not the session cookie you can ignore this issue.
Remediation#
Avoid the usage of session cookie as Anti-CSRF Token.
Classifications#
, , , ,
Invicti Security Insights

Select Category

OR

Search Vulnerability

Tags

OWASP 2017-A6 cookie OWASP 2013-A5

Related Vulnerabilities

Invicti

Dead accurate, fast & easy-to-use Web Application Security Scanner

Get a demo