CWE hub
This hub groups CVEs that NVD maps to CWE-1275, so you can review recent disclosures, common vendors, and related weakness patterns in one place.
Mapped CVEs
1
Records currently returned for this weakness id.
Top vendor
kimai
1 mapped CVEs in the aggregate scan.
Top product
kimai
1 mapped CVEs in the aggregate scan.
KEV on page
0
Visible rows already present in the CISA KEV catalog.
Top products
Related CWEs
No co-occurring CWE mappings were surfaced in the aggregate scan.
Search results
Showing 1-1 of 1 vulnerabilities.
Kimai 1.30.10 contains a SameSite cookie vulnerability that allows attackers to steal user session cookies through malicious exploitation. Attackers can trick victims into executing a crafted PHP script that captures and writes session cookie information to a file, enabling potential session hijacking.
CVSS
8.5
HIGH
Published
Dec 19, 2025
