💣Exploit CVE-2024-35220 - @fastify/session is a session plugin for fastify.

[Maksim]

CVE ID : CVE-2024-35220
Published : May 21, 2024, 9:15 p.m. | 39 minutes ago
Description : @fastify/session is a session plugin for fastify. Requires the @fastify/cookie plugin. When restoring the cookie from the session store, the `expires` field is overriden if the `maxAge` field was set. This means a cookie is never correctly detected as expired and thus expired sessions are not destroyed. This vulnerability has been patched 10.8.0.
Severity: 7.4 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Full story here:

To view the content, you need to Sign In or Register.