Servers and applications
CVE-2023-30861
Possible disclosure of permanent session cookie due to missing Vary: Cookie header
- Severity
- High 7.5
- Published
- 1 May 2023
- Last changed
- 1 May 2023
- Added to UpHeron
- 3 Nov 2026
- Fixed in
- 2.2.5
- Also known as
- GHSA-m2qf-hxjv-5gpq
- Sources
- Project advisories (GitHub)
Affected software
| Software | Affected versions |
|---|---|
FlaskServers and applications · github:pallets/flask |
|
References
- CVE.org https://www.cve.org/CVERecord?id=CVE-2023-30861
- GitHub Advisory Database https://github.com/advisories/GHSA-m2qf-hxjv-5gpq
- github.com https://github.com/pallets/flask/security/advisories/GHSA-m2qf-hxjv-5gpq