Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
EspoCRM version 7.1.8 is vulnerable to Missing Secure Flag allowing the browser to send plain text cookies over an insecure channel (HTTP). An attacker may capture the cookie from the insecure channel using MITM attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
EspoCRM 安全漏洞
Vulnerability Description
EspoCRM是一套开源的基于Web的客户关系管理系统（CRM）。该系统提供销售自动化、社区和客户支持等功能。 EspoCRM 7.1.8版本存在安全漏洞，该漏洞源于存在安全标志缺失的问题，允许浏览器通过不安全的通道(HTTP)发送纯文本cookie，攻击者可能会使用MITM攻击从不安全的通道中捕获cookie。
CVSS Information
N/A
Vulnerability Type
N/A