CVE-2023-41908: Cerebrate-Project Cerebrate

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

Cerebrate before 1.15 lacks the Secure attribute for the session cookie.

Affected products

• Cerebrate-Project Cerebrate: before 1.15 (fixed in 1.15)

Published 2023-09-05. Last modified 2026-06-17.