Description

Identifies Micronaut HTTP cookies that are created without the secure flag set, which makes them vulnerable to interception over insecure connections. Cookies without the secure flag can be transmitted over HTTP, potentially exposing sensitive information to attackers performing man-in-the-middle attacks.

Detection Strategy

• Check if the application imports Micronaut HTTP packages (io.micronaut.http)

• Look for cookie creation using NettyCookie, SimpleCookie, or Cookie.of() methods

• Verify if the secure() method is called on the cookie instance

• Report a vulnerability if a cookie is created without subsequently calling the secure() method

Vulnerable code example

package com.example;

import io.micronaut.http.*;
import io.micronaut.http.cookie.Cookie;
import io.micronaut.http.netty.cookies.NettyCookie;
import io.micronaut.http.simple.cookies.SimpleCookie;

@Controller("/api")...

✅ Secure code example

package com.example;

import io.micronaut.http.*;
import io.micronaut.http.cookie.Cookie;
import io.micronaut.http.netty.cookies.NettyCookie;
import io.micronaut.http.simple.cookies.SimpleCookie;

@Controller("/api")...