CVE-2024-28144 — An attacker who can spoof the IP address and the User-Agent of a logged-in user can takeover the session because of flaws in the self-developed session management. If two users access the web interfac — CVE Database · The Intelligence Room