1 matches found
Session Fixation
github.com/go-gitea/gitea is vulnerable to session fixation. The library does not properly reset the user session after logging out, allowing an attacker to gain privileges via the client-side cookie...