requests: cookie stealing attacks
| Package(s): | requests | CVE #(s): | CVE-2015-2296 | ||||||||||||||||||||||||||||
| Created: | March 16, 2015 | Updated: | June 18, 2015 | ||||||||||||||||||||||||||||
| Description: | From the Ubuntu advisory:
Matthew Daley discovered that Requests incorrectly handled cookies without host values when being redirected. A remote attacker could possibly use this issue to perform session fixation or cookie stealing attacks. | ||||||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||||||