A vulnerability identified as problematic has been detected in code-projects Hospital Management System 1.0. Affected is the function
.
session of the component express-session. This manipulation of the argument secret with the input secret causes use of hard-coded cryptographic key.
This vulnerability is handled as CVE-2025-11609. The attack can be initiated remotely. Additionally, an exploit exists.
