Security Advisory
CVE-2014-3852
5
Vulnerability Description
Pyplate 0.08 does not include the HTTPOnly flag in a Set-Cookie header for the id cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
Published Date
August 7, 2014
Official Source
NIST NVD Advisory