CVE-2025-27223

TRUfusion Enterprise versions through 7.10.4.0 are vulnerable to an authentication bypass due to a hard-coded cryptographic key used to create encrypted cookies. This flaw allows attackers to forge session cookies and gain unauthorized access to sensitive internal information, specifically affect...