Vulnerability in EPiServer.Forms
One of my users had an issue trying to access edit mode in one of our sites. The request failed complaining about Cookies. I looked at the list of cookies for our domain and saw, maby a hundre, cookies named like "uniqName_71_2SaveSelectedCookie" for path /EPiServer/CMS.I guess that the limit of 50 cookies exceeded. I cleard the cookies and the user was able to access edit mode again.
Does any one have any ide what this cookie does and why there where so many?
Using EPiServer.CSM 10.3.2
Still seeing this in 10.7 :)
I see it on alloy demo site as well. Checking...
Can't recreate. Might be related to tree navigation? I've had a bunch of those cookies myself
Ok, I think I have managed to reproduce it.
Steps to reproduce:
Any takes on that? It looks like the cookies are never deleted. It only has a 2 year life time.
I would call it a bug. Send it in and let them fix it. Haven't seen it in bug list so chances are big that they don't know it's an issue...
Incident is registered :)
Did you get any proper solution?