Cobalt Vulnerability Wiki
Cobalt Vulnerability Wiki
Categories
V2 - AuthenticationV3 - Session Management Insecure Storage of JWT Token JWT token over URL (GET method) Old Session do not invalidate after logout Old Session do not invalidate after password changePassword Link Expiration Errors Password Reset Token Sent Over HTTPSession Fixation for Concurrent SessionsSession Fixation for the Same AccountSession Timeout is Too Long Session token predictable / low entropy
V4 - Access ControlV5 - Validation/SanitizationV6 - CryptographyV7 - Error LoggingV8 - Data ProtectionV9 - CommunicationsV10 - Malicious CodeV11 - Business LogicV12 - Files ResourcesV13 - APIV14 - ConfigV3 - Session Management
Password Reset Token Sent Over HTTP
POC
1. Intercept the requests while resetting password
2. Observe that the password reset token is sent over HTTP.
Impact
Low
Likelihood
Low
Ready to get started?
Join some of these great clients we're proud to have helped