Lucene search
+L

1 matches found

RubySec
RubySec
added 2025/05/08 12:0 a.m.25 views

Rack session gets restored after deletion

Summary When using the Rack::Session::Pool middleware, simultaneous rack requests can restore a deleted rack session, which allows the unauthenticated user to occupy that session. Details Rack session middleware prepares the session at the beginning of request, then saves is back to the store wit...

4.2CVSS6.8AI score0.00214EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder