Switch language to english
Znuny Professional Services

Der ((OTRS)) Community Edition Fork mit Langzeit-Support (LTS)

Überblick

ZSA-2025-05

Date
2025-02-12
Affected
All versions of Znuny LTS from 6.5.1 up to including 6.5.11. All versions of Znuny from 7.0.1 up to including 7.1.3. All versions of Znuny LTS 6.0.
Severity
low
CVE
CVE-2025-26844

The cookie attribute HttpOnly is not set in certain situations.

This was a finding during a pentest by a customer. Thanks to Andy.