Filtered by vendor Aio-libs Subscriptions
Filtered by product Aiohttp Session Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2018-1000814 1 Aio-libs 1 Aiohttp Session 2025-03-14 6.5 Medium
aio-libs aiohttp-session version 2.6.0 and earlier contains a Other/Unknown vulnerability in EncryptedCookieStorage and NaClCookieStorage that can result in Non-expiring sessions / Infinite lifespan. This attack appear to be exploitable via Recreation of a cookie post-expiry with the same value.