CVE-2024-6739

The session cookie in MailGates and MailAudit from Openfind does not have the HttpOnly flag enabled, allowing remote attackers to potentially steal the session cookie via XSS.

More information : https://www.openfind.com.tw/taiwan/download/Openfind_OF-ISAC-24-007.pdf