# vulnerability in AWX 15.0.0

**URL:** <https://forum.ansible.com/t/vulnerability-in-awx-15-0-0/36054>\
**Category:** AWX Project\
**Tags:** awx\
**Created:** [November 30, 2021, 10:54pm UTC](https://forum.ansible.com/t/vulnerability-in-awx-15-0-0/36054 "2021-11-30T22:54:12Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![swathi\_t](https://avatars.discourse-cdn.com/v4/letter/s/59ef9b/32.png) [@swathi\_t](https://forum.ansible.com/u/swathi_t)\
**Post date:** [November 30, 2021, 10:54pm UTC](https://forum.ansible.com/t/vulnerability-in-awx-15-0-0/36054/1 "2021-11-30T22:54:12Z")

</div>

Hi,

We found the following vulnerabilities in AWX 15.0.0.

The following cookies were issued by the application and do not have the HttpOnly flag set:

- **csrftoken**
- current\_user  
Please suggest on how to fix this vulnerability.

Regards,  
Swathi