CVE-2023-23934

Werkzeug is a comprehensive WSGI web application library. Browsers may allow "nameless" cookies that look like `=value` instead of `key=value`. A vulnerable browser may allow a compromised application on an adjacent subdomain to exploit this to set a cookie like `=__Host-test=bad` for another subdomain. Werkzeug prior to 2.2.3 will parse the cookie `=__Host-test=bad` as __Host-test=bad`. If a Werkzeug application is running next to a vulnerable or malicious subdomain which sets such a cookie using a vulnerable browser, the Werkzeug application will see the bad cookie value but the valid cookie key. The issue is fixed in Werkzeug 2.2.3.
Configurations

Configuration 1 (hide)

cpe:2.3:a:palletsprojects:werkzeug:*:*:*:*:*:*:*:*

History

18 Aug 2023, 14:15

Type Values Removed Values Added
References
  • (MISC) https://security.netapp.com/advisory/ntap-20230818-0003/ -

07 Aug 2023, 08:15

Type Values Removed Values Added
References
  • (MISC) https://www.debian.org/security/2023/dsa-5470 -
CWE NVD-CWE-noinfo CWE-20

Information

Published : 2023-02-14 20:15

Updated : 2024-02-28 19:51


NVD link : CVE-2023-23934

Mitre link : CVE-2023-23934

CVE.ORG link : CVE-2023-23934


JSON object : View

Products Affected

palletsprojects

  • werkzeug
CWE
CWE-20

Improper Input Validation

NVD-CWE-noinfo