CVE-2023-28472 (published 2023-04-28T00:00:00)
Concrete CMS (previously concrete5) versions 8.5.12 and below, and 9.0 through 9.1.3 does not have Secure and HTTP only attributes set for ccmPoll cookies.
Affected products: Vendor: n/a
Product: n/a
Versions: n/a