Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-27453

CVE-2025-27453

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
SICK AG

Description

The HttpOnly flag is set to false on the PHPSESSION cookie. Therefore, the cookie can be accessed by other sources such as JavaScript.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Endress+Hauser Endress+Hauser MEAC300-FNADE4

Default version status: unaffected

  • 0 to ≤ <=0.16.0affected

Endress+Hauser Endress+Hauser MEAC300-FNADE4

Default version status: affected

  • >=0.17.0unaffected

References