Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2015-2156

Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow remote attackers to bypass the httpOnly flag on cookies and obtain sensitive information by leveraging improper validation of cookie name and value characters.

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
netty / netty 4.0.16 4.0.16.x
netty / netty 4.0.17 4.0.17.x
netty / netty 4.0.18 4.0.18.x
netty / netty 4.0.19 4.0.19.x
netty / netty 4.0.20 4.0.20.x
netty / netty 4.0.21 4.0.21.x
netty / netty 4.0.22 4.0.22.x
netty / netty 4.0.23 4.0.23.x
netty / netty 4.0.24 4.0.24.x
netty / netty 4.0.25 4.0.25.x
netty / netty 4.0.26 4.0.26.x
netty / netty 4.0.27 4.0.27.x
netty / netty - 3.9.7.x
netty / netty 3.10.0 3.10.0.x
netty / netty 3.10.1 3.10.1.x
netty / netty 3.10.2 3.10.2.x
netty / netty 4.0.1 4.0.1.x
netty / netty 4.0.2 4.0.2.x
netty / netty 4.0.3 4.0.3.x
netty / netty 4.0.4 4.0.4.x
netty / netty 4.0.5 4.0.5.x
netty / netty 4.0.6 4.0.6.x
netty / netty 4.0.7 4.0.7.x
netty / netty 4.0.8 4.0.8.x
netty / netty 4.0.9 4.0.9.x
netty / netty 4.0.10 4.0.10.x
netty / netty 4.0.11 4.0.11.x
netty / netty 4.0.12 4.0.12.x
netty / netty 4.0.13 4.0.13.x
netty / netty 4.0.15 4.0.15.x
netty / netty 4.0.0 4.0.0.x
netty / netty 4.0.14 4.0.14.x
netty / netty 4.1.0-beta1 4.1.0-beta1.x
netty / netty 4.1.0-beta2 4.1.0-beta2.x
netty / netty 4.1.0-beta3 4.1.0-beta3.x
netty / netty 4.1.0-beta4 4.1.0-beta4.x
playframework / play_framework 2.3-m1 2.3-m1.x
playframework / play_framework 2.2.5 2.2.5.x
playframework / play_framework 2.2.4 2.2.4.x
playframework / play_framework 2.2.3 2.2.3.x
playframework / play_framework 2.2.3-rc2 2.2.3-rc2.x
playframework / play_framework 2.2.3-rc1 2.2.3-rc1.x
playframework / play_framework 2.2.2-rc4 2.2.2-rc4.x
playframework / play_framework 2.2.2-rc3 2.2.2-rc3.x
playframework / play_framework 2.2.2-rc2 2.2.2-rc2.x
playframework / play_framework 2.2.2-rc1 2.2.2-rc1.x
playframework / play_framework 2.2.1-rc1 2.2.1-rc1.x
playframework / play_framework 2.2.0-rc2 2.2.0-rc2.x
playframework / play_framework 2.2.0-rc1 2.2.0-rc1.x
playframework / play_framework 2.2.0-m3 2.2.0-m3.x
playframework / play_framework 2.2.0-m2 2.2.0-m2.x
playframework / play_framework 2.2.0-m1 2.2.0-m1.x
playframework / play_framework 2.1.6 2.1.6.x
playframework / play_framework 2.1.6-rc1 2.1.6-rc1.x
playframework / play_framework 2.1.5 2.1.5.x
playframework / play_framework 2.1.4 2.1.4.x
playframework / play_framework 2.1.4-rc2 2.1.4-rc2.x
playframework / play_framework 2.1.4-rc1 2.1.4-rc1.x
playframework / play_framework 2.1.3 2.1.3.x
playframework / play_framework 2.1.3-rc2 2.1.3-rc2.x
playframework / play_framework 2.1.3-rc1 2.1.3-rc1.x
playframework / play_framework 2.1.2 2.1.2.x
playframework / play_framework 2.1.2-rc2 2.1.2-rc2.x
playframework / play_framework 2.1.2-rc1 2.1.2-rc1.x
playframework / play_framework 2.1.1-rc2 2.1.1-rc2.x
playframework / play_framework 2.1.1-2.9.x-backport 2.1.1-2.9.x-backport.x
playframework / play_framework 2.1.1-rc1-2.9.x-backport 2.1.1-rc1-2.9.x-backport.x
playframework / play_framework 2.0.1 2.0.1.x
playframework / play_framework 2.0 2.0.x
playframework / play_framework 2.0-rc2 2.0-rc2.x
playframework / play_framework 2.0-rc1 2.0-rc1.x
playframework / play_framework 2.0-beta 2.0-beta.x
lightbend / play_framework 2.0-rc3 2.0-rc3.x
lightbend / play_framework 2.0-rc4 2.0-rc4.x
lightbend / play_framework 2.0-rc5 2.0-rc5.x
lightbend / play_framework 2.0.2-rc1 2.0.2-rc1.x
lightbend / play_framework 2.0.2 2.0.2.x
lightbend / play_framework 2.0.2-rc2 2.0.2-rc2.x
lightbend / play_framework 2.0.3-rc1 2.0.3-rc1.x
lightbend / play_framework 2.0.3 2.0.3.x
lightbend / play_framework 2.0.3-rc2 2.0.3-rc2.x
lightbend / play_framework 2.0.4-rc1 2.0.4-rc1.x
lightbend / play_framework 2.0.4 2.0.4.x
lightbend / play_framework 2.0.4-rc2 2.0.4-rc2.x
lightbend / play_framework 2.0.5-rc1 2.0.5-rc1.x
lightbend / play_framework 2.0.5 2.0.5.x
lightbend / play_framework 2.0.5-rc2 2.0.5-rc2.x
lightbend / play_framework 2.0.6 2.0.6.x
lightbend / play_framework 2.0.7 2.0.7.x
lightbend / play_framework 2.0.8 2.0.8.x
lightbend / play_framework 2.1.0 2.1.0.x
lightbend / play_framework 2.1.1 2.1.1.x
lightbend / play_framework 2.1.1-rc1 2.1.1-rc1.x
lightbend / play_framework 2.2.0 2.2.0.x
lightbend / play_framework 2.2.1 2.2.1.x
lightbend / play_framework 2.2.2 2.2.2.x
lightbend / play_framework 2.2.6 2.2.6.x
lightbend / play_framework 2.3.0-rc1 2.3.0-rc1.x
lightbend / play_framework 2.3.0-rc2 2.3.0-rc2.x
lightbend / play_framework 2.3.0 2.3.0.x
lightbend / play_framework 2.3.1 2.3.1.x
lightbend / play_framework 2.3.2-rc1 2.3.2-rc1.x
lightbend / play_framework 2.3.2 2.3.2.x
lightbend / play_framework 2.3.2-rc2 2.3.2-rc2.x
lightbend / play_framework 2.3.3 2.3.3.x
lightbend / play_framework 2.3.4 2.3.4.x
lightbend / play_framework 2.3.5 2.3.5.x
lightbend / play_framework 2.3.6 2.3.6.x
lightbend / play_framework 2.3.7 2.3.7.x
lightbend / play_framework 2.3.8 2.3.8.x
io.netty / netty-handler - 4.0.2.8