CVE-2025-49189

5.3MEDIUM

The HttpOnlyflag of the session cookie \"@@\" is set to false. Since this flag helps preventing access to cookies via client-side scripts, setting the flag to false can lead to a higher possibility of

发布于: 6/12/2025更新于: 6/12/2025
在NVD查看在MITRE查看

描述

The HttpOnlyflag of the session cookie \"@@\" is set to false. Since this flag helps preventing access to cookies via client-side scripts, setting the flag to false can lead to a higher possibility of Cross-Side-Scripting attacks which target the stored cookies.

AI分析AI驱动

参考资料