Description
Tornado before 6.5.8 contains an incomplete fix for cookie attribute injection that allows attackers to inject arbitrary cookie attributes by passing capitalized or legacy keyword arguments to set_cookie. Attackers can embed semicolon-delimited data in capitalized parameters like Domain, Path, or SameSite to bypass validation and modify cookie security attributes.
Remediation
References
Related Vulnerabilities
WordPress Plugin Top 10-Popular posts for WordPress SQL Injection (2.4.3)
Python Untrusted Search Path Vulnerability (CVE-2023-41105)
WordPress Plugin Comment Extra Fields Multiple Cross-Site Scripting Vulnerabilities (1.7)
Jenkins Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-7537)
Magento Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-7874)