CVE-2015-2296

The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows remote attackers to conduct session fixation attacks via a cookie without…

published March 18, 2015

CVSS
—
EPSS
3%
Percentile
88.8
In the wild
Unconfirmed
What it is

The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows remote attackers to conduct session fixation attacks via a cookie without a host value in a redirect.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03424 · 88.8th percentile
Published
2015-03-18T16:00Z
EPSS history
Timeline
  • 18 MAR 16:00Z
    The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows remote attackers to conduct session fixation attacks via a cookie without…
    cvelistv5