CVE-2014-3853

CVE-2014-3853 describes a vulnerability in Pyplate 0.08 where the "id" cookie lacks the secure flag, even when operating over HTTPS. This oversight allows remote attackers to potentially capture the cookie if it is transmitted over an insecure HTTP session, leading to information disclosure. The vulnerability has a CVSS score of 5.0, indicating a medium severity, with low attack complexity and no authentication required, but only impacts confidentiality. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.