VDB
EN
CRITICAL 9.1

PYSEC-2026-360

Session Fixation in ipsilon

상세

A vulnerability in ipsilon 2.0 before 2.0.2, 1.2 before 1.2.1, 1.1 before 1.1.2, and 1.0 before 1.0.3 was found that allows attacker to log out active sessions of other users. This issue is related to how it tracks sessions, and allows an unauthenticated attacker to view and terminate active sessions from other users. It is also called a "SAML2 multi-session vulnerability."

이 버전이 영향받나요?

사용 중인 패키지 버전을 입력하면 즉시 평가합니다.

영향 패키지

PyPI / ipsilon
최초 영향 버전: 1.0.0 수정 버전: 1.0.3
수정 pip install --upgrade 'ipsilon>=1.0.3'

참고