Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2017/07/17 10:40 p.m.26 views

GSA Bounty: The Federalsit session cookie (federalist.sid) is not properly invalidated - backdoor access to the account is possible

Description Hello. This issue is not very dangerous itself, but can be dangerous in combination of others like XSS, or malicious access to the user account. The user/attacker, who got once valid cookie federalist.sid from the account, can use it as backdoor for some time, because it is not actual...

0.2AI score
SaveExploits0
Rows per page
Query Builder