PYSEC-2018-80

aio-libs aiohttp-session contains a Session Fixation vulnerability in loadsession function for RedisStorage see: https://github.com/aio-libs/aiohttp-session/blob/master/aiohttpsession/redisstorage.pyL42 that can result in Session Hijacking. This attack appear to be exploitable via Any method that...

PT-2018-9416

Name of the Vulnerable Software and Affected Versions aiohttp-session versions prior to 2.4.0 Description The issue concerns a Session Fixation vulnerability in the load session function for RedisStorage. This can result in Session Hijacking. The attack appears to be exploitable via any method th...