Vulnerability URL: https://asgardia.space/en/login And https://asgardia.space/en/password/reset

Vulnerability Name: Cookie Not Marked as Secure

Detail: https://www.netsparker.com/web-vulnerability-scanner/vulnerability-security-checks-index/cookie-not-marked-as-secure/

Hello @furkiak, could you explain a bit more what the vulnerability is? I understand it's because the cookie is "not marked as secure", but what kind of threat does that allow? Thank you.

Did you even follow the link?

This cookie will be transmitted over a HTTP connection, therefore if this cookie is important (such as a session cookie), an attacker might intercept it and hijack a victim's session. If the attacker can carry out a man-in-the-middle attack, he/she can force the victim to make an HTTP request to steal the cookie.

Edit The Only Cookie I have is needed to be logged in. As I get logged out as soon as I delete it and can not log in until I accept that cookie.

I'd like to know, what kind of IT team there is. How big? Who is in there?