Threats tagged 'ghsa-rxq9-mwhc-2q96'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.9	CVE-2025-71455vtenext before 25.02.2 contains a session identifier disclosure vulnerability that allows attackers to read the Medium5.92026-11-04GCVE DatabaseCVE-2025-71455 vtenext versions prior to 25.02.2 have a vulnerability where the PHPSESSID session identifier is disclosed via the Touch web service endpoint. This exposure allows attackers who can execute scripts within the vtenext origin, such as through cross-site scripting (XSS), to bypass the HttpOnly flag and hijack authenticated sessions. Report on CVE-2025-71455 Vulnerability CWE-200 #ghsa-rxq9-mwhc-2q96	GCVE Database	2026-11-04

Page 1 of 1