CVE-2025-12031

Publication date

2025-10-21 17:22:36

Family

azure-access

State

PUBLISHED

Description

HTTP Security Misconfiguration - Lacking Secure and HTTPOnly Attribute may allow reading the sensitive cookies from the javascript contextThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.