Description
Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow remote attackers to bypass the httpOnly flag on cookies and obtain sensitive information by leveraging improper validation of cookie name and value characters.
Remediation
References
Related Vulnerabilities
MySQL CVE-2013-3812 Vulnerability (CVE-2013-3812)
Liferay Portal Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-62242)
WordPress 4.1.x Cross-Site Request Forgery (4.1 - 4.1.25)
phpBB Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-0471)
WordPress Plugin Download Zip Attachments Arbitrary File Download (1.0.0)