Security Advisory
CVE-2015-2296
6.8
Vulnerability Description
The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows remote attackers to conduct session fixation attacks via a cookie without a host value in a redirect.
Published Date
March 18, 2015
Official Source
NIST NVD Advisory