Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2015-2296

The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows remote attackers to conduct session fixation attacks via a cookie without a host value in a redirect.

  • Published: Mar 18, 2015
  • Updated: Apr 13, 2023
  • CVE: CVE-2015-2296
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
mageia_project / mageia 4.0 4.0.x
python / requests 2.4.2 2.4.2.x
python / requests 2.4.3 2.4.3.x
python / requests 2.5.0 2.5.0.x
python / requests 2.5.1 2.5.1.x
python / requests 2.1.0 2.1.0.x
python / requests 2.3.0 2.3.0.x
python / requests 2.4.0 2.4.0.x
python / requests 2.4.1 2.4.1.x
python / requests 2.5.2 2.5.2.x
python / requests 2.5.3 2.5.3.x
python / requests 2.2.1 2.2.1.x
canonical / ubuntu_linux 14.10 14.10.x
canonical / ubuntu_linux 14.04 14.04.x