CVE-2022-29248

score

<0.1

cvss

8.0

epss

1.4%

published

2022-05-25

kev added

—

first seen

2026-10-21

Guzzle prior to versions 6.5.6 and 7.4.3 contains a cookie middleware vulnerability caused by not verifying if the cookie domain matches the server's domain in the Set-Cookie header, letting malicious servers set cookies for unrelated domains, exploit requires manual addition of cookie middleware or specific client configuration.