Логотип exploitDog
bind:CVE-2023-53957
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-53957

Количество 2

Количество 2

nvd логотип

CVE-2023-53957

около 2 месяцев назад

Kimai 1.30.10 contains a SameSite cookie vulnerability that allows attackers to steal user session cookies through malicious exploitation. Attackers can trick victims into executing a crafted PHP script that captures and writes session cookie information to a file, enabling potential session hijacking.

CVSS3: 9.8
EPSS: Низкий
github логотип

GHSA-cv8h-r7r5-vwj9

около 2 месяцев назад

Kimai 1.30.10 contains a SameSite cookie vulnerability that allows attackers to steal user session cookies through malicious exploitation. Attackers can trick victims into executing a crafted PHP script that captures and writes session cookie information to a file, enabling potential session hijacking.

CVSS3: 9.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2023-53957

Kimai 1.30.10 contains a SameSite cookie vulnerability that allows attackers to steal user session cookies through malicious exploitation. Attackers can trick victims into executing a crafted PHP script that captures and writes session cookie information to a file, enabling potential session hijacking.

CVSS3: 9.8
0%
Низкий
около 2 месяцев назад
github логотип
GHSA-cv8h-r7r5-vwj9

Kimai 1.30.10 contains a SameSite cookie vulnerability that allows attackers to steal user session cookies through malicious exploitation. Attackers can trick victims into executing a crafted PHP script that captures and writes session cookie information to a file, enabling potential session hijacking.

CVSS3: 9.8
0%
Низкий
около 2 месяцев назад

Уязвимостей на страницу