7752 matches found
reliz (0.1.0.dev0) potentially affected by CVE-2018-1000519 via aiohttp-session (2.1.0)
aiohttp-session PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp-session and may be impacted: - reliz 0.1.0.dev0 Source cves: CVE-2018-1000519 Source advisory: OSV:PYSEC-2018-80...
ws-web-aiohttp (>=0.1.0a88, <=0.1.0b19) potentially affected by CVE-2018-1000519 via aiohttp-session (0.8.0)
aiohttp-session PYPI version 0.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp-session and may be impacted: - ws-web-aiohttp =0.1.0a88, =0.1.0b19 Source cves: CVE-2018-1000519 Source advisory: OSV:PYSEC-2018-80...
PYSEC-2018-80
aio-libs aiohttp-session contains a Session Fixation vulnerability in loadsession function for RedisStorage see: https://github.com/aio-libs/aiohttp-session/blob/master/aiohttpsession/redisstorage.pyL42 that can result in Session Hijacking. This attack appear to be exploitable via Any method that...
PYSEC-2018-80
aio-libs aiohttp-session contains a Session Fixation vulnerability in loadsession function for RedisStorage see: https://github.com/aio-libs/aiohttp-session/blob/master/aiohttpsession/redisstorage.pyL42 that can result in Session Hijacking. This attack appear to be exploitable via Any method that...
CVE-2018-1000519
aio-libs aiohttp-session contains a Session Fixation vulnerability in loadsession function for RedisStorage see: https://github.com/aio-libs/aiohttp-session/blob/master/aiohttpsession/redisstorage.pyL42 that can result in Session Hijacking. This attack appear to be exploitable via Any method that...
CVE-2018-1000519
The CVE-2018-1000519 entry concerns aiohttp-session (aio-libs) with a Session Fixation vulnerability in RedisStorage.load_session, enabling session hijacking. Affected component: RedisStorage in aiohttp-session; vulnerable function: load_session (reference: repository link in initial doc). Exploi...
reliz (0.1.0.dev0), ws-web-aiohttp (>=0.1.0a88, <=0.1.0b19) potentially affected by CVE-2018-1000519 via aiohttp-session (>=0.8.0, <=2.1.0)
aiohttp-session PYPI version =0.8.0, =0.1.0a88, =0.1.0b19 Source cves: CVE-2018-1000519 Source advisory: MEND:CVE-2018-1000519...
CVE-2018-1000519
aio-libs aiohttp-session contains a Session Fixation vulnerability in loadsession function for RedisStorage see: https://github.com/aio-libs/aiohttp-session/blob/master/aiohttpsession/redisstorage.pyL42 that can result in Session Hijacking. This attack appear to be exploitable via Any method that...
PT-2018-9416
Name of the Vulnerable Software and Affected Versions aiohttp-session versions prior to 2.4.0 Description The issue concerns a Session Fixation vulnerability in the load session function for RedisStorage. This can result in Session Hijacking. The attack appears to be exploitable via any method th...
CVE-2018-1000519: Session Fixation
aio-libs aiohttp-session contains a Session Fixation vulnerability in loadsession function for RedisStorage see: https://github.com/aio-libs/aiohttp-session/blob/master/aiohttpsession/redisstorage.pyL42 that can result in Session Hijacking. This attack appear to be exploitable via Any method that...
Denial Of Service (DoS)
aiohttp is vulnerable to denial of service DoS attacks. The library does not have a limit on websocket message sizes, meaning a malicious user could send a large enough message that could cause the system to run out of memory and crash...