CVE-2025-30039

Publication date

2025-08-27 10:20:57

Family

CERT-PL

State

PUBLISHED

Description

Unauthenticated access to the "/cgi-bin/CliniNET.prd/GetActiveSessions.pl" endpoint allows takeover of any user session logged into the system, including users with admin privileges.