Skip to content
OpenAdvisories
Medium · 6.8 CVE-2025-24318 EUVD-2025-5941GHSA-47m2-cqqx-crjc

Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Sensitive Cookie Without 'HttpOnly' Flag

Published Feb 28, 2025 · Updated Feb 28, 2025 · Assigned by icscert

Vendor: Dario Health Product: Dario Application Database and Internet-based Server Infrastructure

Description

Cookie policy is observable via built-in browser tools. In the presence of XSS, this could lead to full session compromise.

Affected products

VendorProductAffectedFixed
Dario Health Dario Application Database and Internet-based Server Infrastructure All versions —

Advisories 1

References