Tag

session-cookie-vulnerability

Safeguard articles tagged "session-cookie-vulnerability" — guides, analysis, and best practices for software supply chain and application security.

1 article

Flask session cookie information disclosure (CVE-2023-30861)

A missing Vary: Cookie header in Flask session handling let shared caches leak one user's session cookie to another. Here's how to detect and fix it.