CVE-2026-32745

Medium

In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settings

JetBrains·CWE-614·Published 2026-03-13

CVSS

5.7

EPSS

0.00

KEV

Exploits

cve.orgen

118 chars

In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settings

NVDen

118 chars

In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settings

En JetBrains Datalore antes de 2026.1 el secuestro de sesión era posible debido a la falta del atributo seguro para la configuración de cookies.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	6.3	—	—	CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
3.1	Primary	NVD	5.7	2.1	3.6	CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
3.1	Secondary	NVD	6.3	2.1	4.2	CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N