CVE-2025-46336

Rack::Session is a session management implementation for Rack. In versions starting from 2.0.0 to before 2.1.1, when using the Rack::Session::Pool middleware, and provided the attacker can acquire a session cookie (already a major issue), the session may be restored if the attacker can trigger a long running request (within that same session) adjacent to the user logging out, in order to retain illicit access even after a user has attempted to logout. This issue has been patched in version 2.1.1.

Database specific

{
    "cwe_ids": [
        "CWE-362",
        "CWE-367",
        "CWE-613"
    ]
}

References

Affected packages

Git / github.com/rack/rack

Affected ranges

Type: GIT
Repo: https://github.com/rack/rack
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

799a520a015de5938bc01faa8e90b76589c6e7d3

Affected versions

0.*

0.1

0.2

0.3

1.*

1.0

1.1

1.2

1.2.1

1.3.0

1.3.0.beta

1.3.0.beta2

1.4.0

1.4.1

1.5.0

1.5.1

1.5.2

1.6.0

1.6.0.beta

1.6.0.beta2

2.*

2.0.0

2.0.0.alpha

2.0.0.rc1

2.0.1

2.1.0

Git / github.com/rack/rack

Affected ranges

Type: GIT
Repo: https://github.com/rack/rack-session
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

c28c4a8c1861d814e09f2ae48264ac4c40be2d3b