Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2018/09/13 3:46 p.m.36 views

aiohttp-session Session Fixation vulnerability

The pypi package aiohttp-session before 2.4.0 contained a Session Fixation vulnerability in loadsession function for RedisStorage that can result in Session Hijacking. This attack appear to be exploitable via Any method that allows setting session cookies ?session=, or meta tags or script tags wi...

6.5CVSS6.2AI score0.01181EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder