Security Advisory

CVE-2015-2296

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2015-03-18 16:00:00

Last updated 2024-08-06 05:10:16

Assigner mitre

State PUBLISHED

Description

The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows remote attackers to conduct session fixation attacks via a cookie without a host value in a redirect.

← Browse all CVEs View on cve.org ↗