1 matches found
Non-expiring Infinite Sessions
aiohttpsession has non-expiring infinite sessions. The cause of the vulnerability is due to lack of inherent data expiration in EncryptedCookieStorage and NaClCookieStorage...