CVE-2022-4409

Description

phpMyFAQ is contains Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in versions prior to 3.1.9.

How to fix CVE-2022-4409

To remediate CVE-2022-4409, upgrade the affected package to a fixed version below.

• Packagist/thorsten/phpmyfaq—upgrade to 3.1.9 or later

Is CVE-2022-4409 being exploited?

Low — EPSS is 0.2%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 3.1.9

CVSS scores

References (5)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2022-4409
• PATCHgithub.com/thorsten/phpmyfaq
• WEBgithub.com/thorsten/phpmyfaq/commit/8b47f38
• WEBgithub.com/thorsten/phpMyFAQ/commit/c16cc2bbe2687f75aa1204b804483091fae43cba
• WEB