Sprache wechseln auf deutsch
Znuny Professional Services

The ((OTRS)) Community Edition Fork with long-term Support (LTS)

Overview

ZSA-2025-05

Date
2025-02-12
Affected
All versions of Znuny LTS from 6.5.1 up to including 6.5.11. All versions of Znuny from 7.0.1 up to including 7.1.3. All versions of Znuny LTS 6.0.
Severity
low
CVE
CVE-2025-26844

The cookie attribute HttpOnly is not set in certain situations.

This was a finding during a pentest by a customer. Thanks to Andy.