Werkzeug is a comprehensive WSGI web application library. Browsers may allow "nameless" cookies that look like `=value` instead of `key=value`. A vulnerable browser may allow a compromised application on an adjacent subdomain to exploit this to set a cookie like `=__Host-test=bad` for another subdomain. Werkzeug prior to 2.2.3 will parse the cookie `=__Host-test=bad` as __Host-test=bad`. If a Werkzeug application is running next to a vulnerable or malicious subdomain which sets such a cookie using a vulnerable browser, the Werkzeug application will see the bad cookie value but the valid cookie key. The issue is fixed in Werkzeug 2.2.3.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2023-02-14T19:56:22.659Z

Updated: 2024-08-02T10:49:07.628Z

Reserved: 2023-01-19T21:12:31.360Z

Link: CVE-2023-23934

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-02-14T20:15:17.370

Modified: 2024-11-21T07:47:07.947

Link: CVE-2023-23934

cve-icon Redhat

Severity : Low

Publid Date: 2023-02-14T00:00:00Z

Links: CVE-2023-23934 - Bugzilla