https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 23:18:13 +0000 https://cve.radiocsirt.org/vuln/cve-2026-15076 <p><strong>Affected:</strong> Eclipse Foundation Eclipse Vert.x</p> <p>In versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), the WebClientSession component of Eclipse Vert.x Web Client does not validate that the Domain attribute of a Set-Cookie response header matches the originating server&#39;s domain, in violation of RFC 6265 section 5.3. An attacker who controls any server that the victim application contacts can inject a cookie scoped to an arbitrary third-party domain; because the session store performs no cross-domain ownership check, it stores and later transmits that cookie to the targeted domain.</p> <p>When the victim application subsequently sends a request to the targeted domain using the same WebClientSession, it presents the attacker-injected cookie, causing the receiving service to process the request under the attacker&#39;s account. Sensitive data included in the victim application&#39;s requests, such as payment amounts, card details, or other API payloads, may then be accessible to the attacker through their own account on that service.</p> <p><strong>Affected:</strong> Eclipse Foundation Eclipse Vert.x</p> <p>In versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), the WebClientSession component of Eclipse Vert.x Web Client does not validate that the Domain attribute of a Set-Cookie response header matches the originating server&#39;s domain, in violation of RFC 6265 section 5.3. An attacker who controls any server that the victim application contacts can inject a cookie scoped to an arbitrary third-party domain; because the session store performs no cross-domain ownership check, it stores and later transmits that cookie to the targeted domain.</p> <p>When the victim application subsequently sends a request to the targeted domain using the same WebClientSession, it presents the attacker-injected cookie, causing the receiving service to process the request under the attacker&#39;s account. Sensitive data included in the victim application&#39;s requests, such as payment amounts, card details, or other API payloads, may then be accessible to the attacker through their own account on that service.</p> https://cve.radiocsirt.org/vuln/cve-2026-15076