CVE-2023-53957 - Kimai 1.30.10 SameSite Cookie Vulnerability Session Hijacking

CVE ID : CVE-2023-53957 Published : Dec. 19, 2025, 9:15 p.m. | 1 hour, 10 minutes ago Description : Kimai 1.30.10 contains a SameSite cookie vulnerability that allows attackers to steal user session cookies through malicious exploitation. Attackers can trick victims into executing a crafted PHP script that captures and writes session cookie information to a file, enabling potential session hijacking. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor