Lucene search
+L

2 matches found

OSV
OSV
added 2019/12/18 7:1 p.m.40 views

GHSA-HRQR-HXPP-CHR3 Possible Information Leak / Session Hijack Vulnerability in Rack

There's a possible information leak / session hijack vulnerability in Rack. Attackers may be able to find and hijack sessions by using timing attacks targeting the session id. Session ids are usually stored and indexed in a database that uses some kind of scheme for speeding up lookups of that...

6.3CVSS5.7AI score0.03687EPSS
SaveExploits0References13
Rows per page
Query Builder