cve/2020/CVE-2020-8184.md

### [CVE-2020-8184](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8184)
![](https://img.shields.io/static/v1?label=Product&message=https%3A%2F%2Fgithub.com%2Frack%2Frack&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Reliance%20on%20Cookies%20without%20Validation%20and%20Integrity%20Checking%20in%20a%20Security%20Decision%20(CWE-784)&color=brighgreen)

### Description

A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possible for an attacker to forge a secure or host-only cookie prefix.

### POC

#### Reference
- https://hackerone.com/reports/895727
- https://hackerone.com/reports/895727

#### Github
- https://github.com/ARPSyndicate/cvemon
- https://github.com/Live-Hack-CVE/CVE-2020-8184
- https://github.com/mboldt/2022-05-kubecon-eu-cnb-office-hours-demo