Search/CVE-2015-2296
● CVE

CVE-2015-2296

Vendorcanonical, python, mageia projectProductubuntu linux, requests, mageiaDiscoveredMar 18, 2015UpdatedMay 6, 2026

The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows remote attackers to conduct session fixation attacks via a cookie without a host value in a redirect.

View graph Watch Export
CVSS v3.1
—
EPSS
3.42%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
3 relationships
Timeline
disclosure → media coverage
Mar 18, 2015
Disclosure — published as a CVE record. · last revised by NVD May 6, 2026