A vulnerability was found in Macaron csrf and classified as problematic. Affected by this issue is some unknown functionality of the file csrf.go. The manipulation of the argument Generate leads to sensitive cookie without secure attribute. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The patch is identified as dadd1711a617000b70e5e408a76531b73187031c. It is recommended to apply a patch to fix this issue. VDB-217058 is the identifier assigned to this vulnerability.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability was found in Macaron csrf and classified as problematic. Affected by this issue is some     unknown functionality of the file csrf.go. The manipulation of the argument Generate leads to sensitive     cookie without secure attribute. The attack may be launched remotely. The complexity of an attack is     rather high. The exploitation is known to be difficult. The patch is identified as     dadd1711a617000b70e5e408a76531b73187031c. It is recommended to apply a patch to fix this issue. VDB-217058     is the identifier assigned to this vulnerability. (CVE-2018-25060)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A vulnerability was found in Macaron csrf and classified as problematic. Affected by this issue is some
    unknown functionality of the file csrf.go. The manipulation of the argument Generate leads to sensitive
    cookie without secure attribute. The attack may be launched remotely. The complexity of an attack is
    rather high. The exploitation is known to be difficult. The patch is identified as
    dadd1711a617000b70e5e408a76531b73187031c. It is recommended to apply a patch to fix this issue. VDB-217058
    is the identifier assigned to this vulnerability. (CVE-2018-25060)

ID	Name	Product	Family	Severity
222677	Linux Distros Unpatched Vulnerability : CVE-2018-25060	Nessus	Misc.	high
415789	SCA: security update for github.com/go-macaron/csrf (GHSA-hhxg-px5h-jc32)	Tenable Cloud Security	SCA Checks	high
415789	SCA: security update for github.com/go-macaron/csrf (GHSA-hhxg-px5h-jc32)	Tenable Self-Hosted Container Security	SCA Checks	high

Detections

Analytics

CVE-2018-25060

high

Tenable Plugins

high

high

high