Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:36013
HistoryJun 16, 2022 - 7:47 a.m.

Information Disclosure

2022-06-1607:47:09
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
19
information disclosure
session cookies
unauthorized access
sensitive information
software

EPSS

0.001

Percentile

48.7%

@ffdc/nestjs-proxy is vulnerable to information disclosure. The vulnerability exists due to lack of sanitization in session cookies which allows an unauthorized user to access sensitive information in the system.

EPSS

0.001

Percentile

48.7%

Related for VERACODE:36013