地图 / 会话固定

会话固定

Session Fixation · 身份认证

身份认证 / 会话固定

15公开报告

—CWE 编号

0已标注发现方式

15关联报告

发现方式分布

暂无发现方式标注。

关联报告

H1514 Session Fixation on multiple shopify-built apps on *.shopifycloud.com and *.shopifyapps.comShopify · 2019-04-25 · 未评级 · 144 票 account takeover https://idea.qiwi.com/QIWI · — · 未评级 · 87 票 Session Persistence Designed to Keep Users Logged In Across Multiple Devices (Intended Behaviour)Shopify · 2025-09-04 · 低危 · 63 票 2FA Session not expires after the password resetNextcloud · 2021-01-18 · 低危 · $50 · 35 票 CVE-2023-40273: Session fixation in Apache Airflow web interfaceInternet Bug Bounty · 2023-09-04 · 低危 · $540 · 26 票 Session fixation on public talk linksNextcloud · 2021-06-16 · 低危 · $100 · 23 票 Intercom chat session information persists after logoutLegal Robot · 2017-07-18 · 低危 · 20 票 Session fixation in password protected public download.Nextcloud · 2018-10-25 · 低危 · 20 票 Pending MFA logins aren't immediatly expired after a password changeMoneybird · 2020-07-10 · 低危 · 15 票 Session Fixiation allow attacker to create new evil workspace without being logged in [ Insecure Session management ]Courier · 2021-09-16 · 低危 · 12 票 ████████ portal is open to enumeration once authenticated. Session ID's appear static. All PII available once a valid session ID is found.U.S. Dept Of Defense · 2021-04-20 · 高危 · 7 票 Password Reset page Session FixationLegal Robot · 2017-08-16 · 低危 · 7 票 The auth token does not expire on logging out and even after logging out all sessionsMail.ru · — · 未评级 · 7 票 Session Fixation on AcronisAcronis · 2022-03-01 · 低危 · 6 票 Cookie injection from non-secure contextcurl · 2022-05-13 · 中危 · 2 票