CVE-2023-41908 Information

Description

Cerebrate before 1.15 lacks the Secure attribute for the session cookie.

Reference

https://github.com/cerebrate-project/cerebrate/commit/9be81055651649658243b5aa274b175064bfc6db https://github.com/cerebrate-project/cerebrate/compare/v1.14…v1.15