← Database

CVE-2024-8644

HIGH CVSS: 7.5 Published: 2024-09-27 Modified: 2026-06-17

Description

Cleartext Storage of Sensitive Information in a Cookie vulnerability in Oceanic Software ValeApp allows Protocol Manipulation, : JSON Hijacking (aka JavaScript Hijacking). This issue affects ValeApp: before v2.0.0.

Affected Platforms

Oceanicsoft Valeapp

Weakness Type

CWE-315, CWE-312

References