Lucene search
PRIOn knowledge basePRION:CVE-2018-1000519HistoryJun 26, 2018 - 4:29 p.m.
Session fixation
2018-06-2616:29:00
PRIOn knowledge base
www.prio-n.com
1
aio-libs aiohttp-session contains a Session Fixation vulnerability in load_session function for RedisStorage (see: https://github.com/aio-libs/aiohttp-session/blob/master/aiohttp_session/redis_storage.py#L42) that can result in Session Hijacking. This attack appear to be exploitable via Any method that allows setting session cookies (?session=<>, or meta tags or script tags with Set-Cookie).
Related
osv
osv
PYSEC-2018-80
2018-06-26 16:29:00
aiohttp-session Session Fixation vulnerability
2018-09-13 15:46:40
veracode
veracode
Session Fixation
2018-06-27 05:31:49
nvd
nvd
CVE-2018-1000519
2018-06-26 16:29:01
github
github
aiohttp-session Session Fixation vulnerability
2018-09-13 15:46:40
cve
cve
CVE-2018-1000519
2018-06-26 16:29:01
cvelist
cvelist
CVE-2018-1000519
2018-06-26 16:00:00