CVE-2025-24318

Medium

Cookie policy is observable via built-in browser tools. In the presence of XSS, this could lead to full session compromise.

icscert·CWE-1004·Published 2025-02-28

CVSS

6.8

EPSS

0.00

KEV

Exploits

cve.orgen

123 chars

Cookie policy is observable via built-in browser tools. In the presence of XSS, this could lead to full session compromise.

NVDen

123 chars

Cookie policy is observable via built-in browser tools. In the presence of XSS, this could lead to full session compromise.

La política de cookies se puede observar a través de las herramientas integradas del navegador. En presencia de XSS, esto podría provocar la vulneración total de la sesión.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	6.8	—	—	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
3.1	Secondary	NVD	6.8	2.2	4.0	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
4.0	Primary	cve.org	5.9	—	—	CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
4.0	Secondary	NVD	5.9	—	—	CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X