CVE-2025-53861 — Aap: sensitive cookie(s) set without security flags
A flaw was found in Ansible. Sensitive cookies without security flags over non-encrypted channels can lead to Man-in-the-Middle (MitM) and Cross-site scripting (XSS) attacks all…
Published: 2025-07-11 · CVSS: 3.1 · CVSS 3.1
A flaw was found in Ansible. Sensitive cookies without security flags over non-encrypted channels can lead to Man-in-the-Middle (MitM) and Cross-site scripting (XSS) attacks allowing attackers to read transmitted data.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7