MediumVulnerability
CVE-2024-47833: Taipy session cookies served without Secure and HTTPOnly flags
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2024-47833
- Published
- Record updated
- Affected
- taipy <= 3.1.1
- Fixed in
- 4.0.0
- released October 9, 2024, on the day of disclosure
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.3%
Summary
CVE-2024-47833 affects Taipy, an open-source Python library for end-to-end application development. In affected versions, session cookies are served without the Secure and HTTPOnly flags. GitHub, Inc. is the CNA, rating the issue CVSS-B 6.3 MEDIUM.
Mitigation
This issue has been addressed in release version 4.0.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability.