https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T18:05:45.056148+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2019-25091 CVE-2019-25091 — nsupdate.info CSRF Cookie base.py cookie httponly flag 2026-10-07T18:05:45.072295+00:00

Affected: nsupdate.info

A vulnerability classified as problematic has been found in nsupdate.info. This affects an unknown part of the file src/nsupdate/settings/base.py of the component CSRF Cookie Handler. The manipulation of the argument CSRF_COOKIE_HTTPONLY leads to cookie without 'httponly' flag. It is possible to initiate the attack remotely. The name of the patch is 60a3fe559c453bc36b0ec3e5dd39c1303640a59a. It is recommended to apply a patch to fix this issue. The identifier VDB-216909 was assigned to this vulnerability.