CVE-2025-27453

Description

The HttpOnly flag is set to false on the PHPSESSION cookie. Therefore, the cookie can be accessed by other sources such as JavaScript.

Affected Platforms

Weakness Type

CWE-1004

References

• https://sick.com/psirt
• https://sick.com/psirt
• https://sick.com/psirt
• https://sick.com/psirt
• https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• https://www.endress.com