CVE-2025-9913 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

JavaScript can be ran inside the address bar via the dashboard "Open in new Tab" Button, making the application vulnerable to session hijacking.
Medium CVSS: 4.5

CVE-2025-9913

JavaScript can be ran inside the address bar via the dashboard "Open in new Tab" Button, making the application vulnerable to session hijacking.
Vendor
Sick
Product
Baggage Analytics
CWE
CWE-79
Yayın Tarihi
2025-10-06 07:15:36
Güncelleme
2026-01-29 01:55:44
Source Identifier
psirt@sick.de
KEV Date Added
-

Kategoriler

CWE-79 Baggage Analytics MEDIUM Sick 2025

Referanslar

https://sick.com/psirt https://www.cisa.gov/resources-tools/resources/ics-recommended-practices https://www.first.org/cvss/calculator/3.1 https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf