CVE-2013-3636

CVE-2013-3636 is a remote information disclosure vulnerability affecting ProjectPier version 0.8.8, stemming from the absence of the HttpOnly cookie flag. This weakness allows for potential client-side script access to sensitive cookie data. Rated with a CVSS score of 5.4 (Medium), exploitation requires user interaction and a low-privileged attacker, potentially leading to limited confidentiality and integrity impacts. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.