CVE-2025-49193 — Missing HTTP Security Headers
The application fails to implement several security headers. These headers help increase the overall security level of the web application by e.g., preventing the application to…
Published: 2025-06-12 · CVSS: 4.2 · CVSS 3.1
The application fails to implement several security headers. These headers help increase the overall security level of the web application by e.g., preventing the application to be displayed in an iFrame (Clickjacking attacks) or not executing injected malicious JavaScript code (XSS attacks).
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7