CVE-2023-53957 — Kimai 1.30.10 SameSite Cookie Vulnerability Session Hijacking
Kimai 1.30.10 contains a SameSite cookie vulnerability that allows attackers to steal user session cookies through malicious exploitation. Attackers can trick victims into execu…
Published: 2025-12-19 · CVSS: 8.5 · CVSS 4.0
Kimai 1.30.10 contains a SameSite cookie vulnerability that allows attackers to steal user session cookies through malicious exploitation. Attackers can trick victims into executing a crafted PHP script that captures and writes session cookie information to a file, enabling potential session hijacking.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7