CVE-2018-25060 - CVE House
Back to Database
Status published Low CVE-2018-25060

Macaron csrf csrf.go missing secure attribute

Vulnerability Description

A vulnerability was found in Macaron csrf and classified as problematic. Affected by this issue is some unknown functionality of the file csrf.go. The manipulation of the argument Generate leads to sensitive cookie without secure attribute. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The patch is identified as dadd1711a617000b70e5e408a76531b73187031c. It is recommended to apply a patch to fix this issue. VDB-217058 is the identifier assigned to this vulnerability.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-25060

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • VulDB GitHub Commit Analyzer

References

More from Macaron

View All →
CVE-2020-36627
Macaron i18n i18n.go redirect
Medium 5.5

Affected Vendor

Affected Software

csrf
Vulnerable Versions:
Unknown

Timeline

Official Publish: December 30th, 2022
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)

CWE-614

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.