PT-2021-23539

Name of the Vulnerable Software and Affected Versions TopEase Platform versions prior to 7.1.28 Description The issue concerns a missing HTTPOnly flag in web applications on the TopEase Platform, allowing an unauthenticated remote attacker to escalate privileges by stealing and injecting a static...