1 matches found
CVE-2018-1000519: Session Fixation
aio-libs aiohttp-session contains a Session Fixation vulnerability in loadsession function for RedisStorage see: https://github.com/aio-libs/aiohttp-session/blob/master/aiohttpsession/redisstorage.pyL42 that can result in Session Hijacking. This attack appear to be exploitable via Any method that...
6.5CVSS6.6AI score0.01175EPSS
SaveExploits1References2
20