CVE-2022-25151 - Session cookie not protected by HttpOnly flag (ITarian SaaS platform / on-premise) Advisory Technical details