https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-05T23:36:31.754381+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2025-71455 CVE-2025-71455 — vtenext before 25.02.2 Session Identifier Disclosure via Touch Web Service 2026-11-05T23:36:31.755478+00:00

Affected: vtenext

vtenext before 25.02.2 contains a session identifier disclosure vulnerability that allows attackers to read the PHPSESSID value returned by the Touch web service endpoint. Attackers who can run script in the vtenext origin, such as through cross-site scripting, can bypass the HttpOnly flag and hijack authenticated sessions.