The program’s control flow relies on the values obtained from the cookie. There is no guarantee that the cookies belong to the current user or that they have not been modified.

Attackers can easily modify cookies, within the browser or by implementing the client-side code outside of the browser. Attackers can bypass protection mechanisms such as authorization and authentication by modifying the cookie to contain an expected value.

References

LOW

Kotlin : Cookie: reliance without validation

Classification

Overview

References

DerScanner Severity Score

Do you want to fix Kotlin : Cookie: reliance without validation in your application?

See also

Kotlin : Missing required cryptographic step

Kotlin : Logging into system output

Kotlin : Call of notify() in synchronized block