cve/2025/CVE-2025-27450.md
2025-09-29 21:09:30 +02:00

901 B

CVE-2025-27450

Description

The Secure attribute is missing on multiple cookies provided by the MEAC300-FNADE4. An attacker can trick a user to establish an unencrypted HTTP connection to the server and intercept the request containing the PHPSESSID cookie.

POC

Reference

Github