Threats Tagged 'cve-2026-82697'

A security vulnerability in the sambitraj Student-Management-System affects the session_start function, resulting in cookies being set without the 'httponly' flag. This vulnerability can be exploited remotely but requires high attack complexity and no user interaction. The vulnerability has a low CVSS score of 3.7 and does not impact confidentiality, integrity, or availability significantly. No patch or fix has been provided yet, and the project has not responded to the issue report. The product uses a rolling release model, so no specific affected or fixed versions are identified.

CVE-2026-82697 is a medium severity vulnerability in the sambitraj Student-Management-System where cookies are set without the 'HttpOnly' flag due to the session_start function. This flaw allows cookies to be accessible via client-side scripts, potentially increasing the risk of theft through cross-site scripting attacks. The vulnerability has been publicly disclosed but is considered difficult to exploit and requires high attack complexity. The product uses a rolling release model, and no specific affected or fixed versions are provided. The vendor has not yet responded or issued a patch.