Lucene search
Veracode Vulnerability DatabaseVERACODE:22372HistoryJan 28, 2020 - 2:54 a.m.
Information Disclosure
2020-01-2802:54:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
EPSS
0.001
Percentile
42.8%
django_user_sessions is vulnerable to information disclosure. The vulnerability exists as the session key could be extracted from session_list.html through an XSS exploit.
Related
cve
cve
CVE-2020-5224
2020-01-24 20:15:10
osv
osv
CVE-2020-5224
2020-01-24 20:15:10
Session key exposure through session list in Django User Sessions
2020-01-24 19:56:59
PYSEC-2020-230
2020-01-24 20:15:00
github
github
Session key exposure through session list in Django User Sessions
2020-01-24 19:56:59
prion
prion
Design/Logic Flaw
2020-01-24 20:15:00
cvelist
cvelist
nvd
nvd
CVE-2020-5224
2020-01-24 20:15:10