CyberRota Analysis
AI analysis pending.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Detected Signals
poc
Note: these links are listed for security research and verification purposes only.
CVE
CVE-2022-38846
Severity
MEDIUM
CVSS
5.9
EPSS
0.43%
Original NVD Description
EspoCRM version 7.1.8 is vulnerable to Missing Secure Flag allowing the browser to send plain text cookies over an insecure channel (HTTP). An attacker may capture the cookie from the insecure channel using MITM attack.
Related CVEs
Other vulnerabilities affecting the same vendor(s)