Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2025-24318

Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Sensitive Cookie Without 'HttpOnly' Flag

Description

Cookie policy is observable via built-in browser tools. In the presence of XSS, this could lead to full session compromise.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dario Health Dario Application Database and Internet-based Server Infrastructure

Default version status: unaffected

  • All versionsaffected

References