Количество 2
Количество 2
CVE-2018-1000814
aio-libs aiohttp-session version 2.6.0 and earlier contains a Other/Unknown vulnerability in EncryptedCookieStorage and NaClCookieStorage that can result in Non-expiring sessions / Infinite lifespan. This attack appear to be exploitable via Recreation of a cookie post-expiry with the same value.
GHSA-mr4x-c4v9-x729
aiohttp-session creates non-expiring sessions
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2018-1000814 aio-libs aiohttp-session version 2.6.0 and earlier contains a Other/Unknown vulnerability in EncryptedCookieStorage and NaClCookieStorage that can result in Non-expiring sessions / Infinite lifespan. This attack appear to be exploitable via Recreation of a cookie post-expiry with the same value. | CVSS3: 6.5 | 0% Низкий | около 7 лет назад |
| GHSA-mr4x-c4v9-x729 aiohttp-session creates non-expiring sessions | CVSS3: 6.5 | 0% Низкий | около 7 лет назад |
Уязвимостей на страницу