Skip to content
OpenAdvisories

Vendor

danschultzer

1 known vulnerabilities.

Products

Pow 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2020-5205

    Session fixation attack in Pow (Hex package)

    In Pow (Hex package) before 1.0.16, the use of Plug.Session in Pow.Plug.Session is susceptible to session fixation attacks if a persistent session store is used for Plug.Session, such as Redis or a database. Cookie store, which is used in most Phoenix apps, d…

    danschultzer Pow pow Hex