Lucene search
Veracode Vulnerability DatabaseVERACODE:22372HistoryJan 28, 2020 - 2:54 a.m.
Information Disclosure
2020-01-2802:54:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
42.8%
django_user_sessions is vulnerable to information disclosure. The vulnerability exists as the session key could be extracted from session_list.html through an XSS exploit.
| CPE | Name | Operator | Version |
|---|---|---|---|
| django-user-sessions | le | 1.7.0 |
Related
cvelist
cvelist
nvd
nvd
CVE-2020-5224
2020-01-24 20:15:10
prion
prion
Design/Logic Flaw
2020-01-24 20:15:00
osv
osv
PYSEC-2020-230
2020-01-24 20:15:00
Session key exposure through session list in Django User Sessions
2020-01-24 19:56:59
CVE-2020-5224
2020-01-24 20:15:10
github
github
Session key exposure through session list in Django User Sessions
2020-01-24 19:56:59
cve
cve
CVE-2020-5224
2020-01-24 20:15:10