CVE-2019-5647

Published: 2020-01-22T18:15Z

Last Modified: 2024-11-21T04:45Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The Chrome Plugin for Rapid7 AppSpider can incorrectly keep browser sessions active after recording a macro, even after a restart of the Chrome browser. This behavior could make future session hijacking attempts easier, since the user could believe a session was closed when it was not. This issue affects Rapid7 AppSpider version 3.8.213 and prior versions, and is fixed in version 3.8.215. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt