60 matches found
DEBIAN-CVE-2026-79312
webpy web.py 0.76 is vulnerable to Session Fixation. The component Session.load reads sessionid directly from the request cookie and loads that session from the store, and save writes back under the same sessionid; no rotation after authentication, so a fixed sessionid keeps the authenticated sta...
CVE-2026-79311
webpy web.py 0.76 is vulnerable to Cross Site Scripting XSS via renderjinja.init...
UBUNTU-CVE-2026-79311
webpy web.py 0.76 is vulnerable to Cross Site Scripting XSS via renderjinja.init...
CVE-2026-79312
webpy web.py 0.76 is vulnerable to Session Fixation. The component Session.load reads sessionid directly from the request cookie and loads that session from the store, and save writes back under the same sessionid; no rotation after authentication, so a fixed sessionid keeps the authenticated sta...
CVE-2026-79311
webpy web.py 0.76 is vulnerable to Cross Site Scripting XSS via renderjinja.init...
UBUNTU-CVE-2026-79312
webpy web.py 0.76 is vulnerable to Session Fixation. The component Session.load reads sessionid directly from the request cookie and loads that session from the store, and save writes back under the same sessionid; no rotation after authentication, so a fixed sessionid keeps the authenticated sta...
DEBIAN-CVE-2026-79313
webpy web.py 0.76 is vulnerable to Insufficient Session Expiration. The application's session management relies on periodic cleanup to expire sessions instead of checking the last-access time when a session is loaded. As a result, an expired session whose record has not yet been cleaned up can...
UBUNTU-CVE-2026-79313
webpy web.py 0.76 is vulnerable to Insufficient Session Expiration. The application's session management relies on periodic cleanup to expire sessions instead of checking the last-access time when a session is loaded. As a result, an expired session whose record has not yet been cleaned up can...
CVE-2026-79313
webpy web.py 0.76 is vulnerable to Insufficient Session Expiration. The application's session management relies on periodic cleanup to expire sessions instead of checking the last-access time when a session is loaded. As a result, an expired session whose record has not yet been cleaned up can...
CVE-2026-79313: Insufficient Session Expiration
webpy web.py 0.76 is vulnerable to Insufficient Session Expiration. The application's session management relies on periodic cleanup to expire sessions instead of checking the last-access time when a session is loaded. As a result, an expired session whose record has not yet been cleaned up can...
CVE-2026-79312
The webpy web.py 0.76 framework is vulnerable to Session Fixation . The flaw exists because the Session._load() component reads the session_id directly from the request cookie to load sessions from the store, while the _save() method writes back using that same ID. Because there is no rotation of...
PT-2026-96756
webpy web.py 0.76 is vulnerable to Insufficient Session Expiration. The application's session management relies on periodic cleanup to expire sessions instead of checking the last-access time when a session is loaded. As a result, an expired session whose record has not yet been cleaned up can...
CVE-2026-79313
The webpy web.py 0.76 framework is vulnerable to Insufficient Session Expiration . The root cause is that session management relies on periodic cleanup to expire sessions rather than verifying the last-access time when a session is loaded. This allows an attacker who possesses a previously valid ...
PT-2026-96773
webpy web.py 0.76 is vulnerable to Session Fixation. The component Session. load reads session id directly from the request cookie and loads that session from the store, and save writes back under the same session id; no rotation after authentication, so a fixed session id keeps the authenticated...
CVE-2026-79311: Undefined Security Weakness
webpy web.py 0.76 is vulnerable to Cross Site Scripting XSS via renderjinja.init...
CVE-2026-79311
webpy (web.py) version 0.76 is vulnerable to Cross-Site Scripting (XSS) through the render_jinja.__init__() function. The vulnerability allows injected script to be executed in a user's browser when the Jinja rendering path is invoked. No specific affected version range beyond 0.76, remediation d...
CVE-2026-79312
webpy web.py 0.76 is vulnerable to Session Fixation. The component Session.load reads sessionid directly from the request cookie and loads that session from the store, and save writes back under the same sessionid; no rotation after authentication, so a fixed sessionid keeps the authenticated sta...
EUVD-2026-84551
webpy web.py 0.76 is vulnerable to Cross Site Scripting XSS via renderjinja.init...
CVE-2026-79312: Session Fixation
webpy web.py 0.76 is vulnerable to Session Fixation. The component Session.load reads sessionid directly from the request cookie and loads that session from the store, and save writes back under the same sessionid; no rotation after authentication, so a fixed sessionid keeps the authenticated sta...
