Security Advisory
CVE-2025-27453
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The HttpOnly flag is set to false on the PHPSESSION cookie. Therefore, the cookie can be accessed by other sources such as JavaScript.