Get Started
- CodeAnt AI
- Control Center
- Pull Request Review
- IDE
- Compliance
- Anti-Patterns
- Code Governance
- Infrastructure Security Database
- Application Security Database
- Apex
- Bash
- C
- Clojure
- Cpp
- Csharp
- Dockerfile
- Elixir
- Fingerprints
- Generic
- Go
- Html
- Java
- Javascript
- Json
- Kotlin
- Ocaml
- Php
- Problem-based-packs
- Python
- Airflow
- Attr
- Aws-lambda
- Bokeh
- Boto3
- Cassandra
- Click
- Correctness
- Couchbase
- Cryptography
- Distributed
- Django
- Docker
- Elasticsearch
- Fastapi
- Flask
- Ai
- Best practice
- Caching
- Code
- Correctness
- Db
- Debug
- Deserialization
- File
- Flask-hardcoded-database-password-uri
- Log
- Maintainability
- Net
- Os
- Regex
- Security
- Security
- Web
- Flask-cookie-app-config-httponly-false
- Flask-cookie-app-config-samesite-none
- Flask-cookie-app-config-secure-false
- Flask-cookie-httponly-false
- Flask-cookie-httponly-missing
- Flask-cookie-samesite-missing
- Flask-cookie-samesite-none
- Flask-cookie-secure-false
- Flask-cookie-secure-missing
- Flask-login-session-protection-app-config-none
- Flask-login-session-protection-none
- Flask-talisman-cookie-secure-false
- Flask-talisman-decorator-cookie-secure-false
- Flask-wtf-csrf-check-default-false
- Xml
- Jinja2
- Jwt
- Lang
- Ldap3
- Mariadb
- Mysql
- Mysqlclient
- Neo4j
- Openai
- Peewee
- Pg8000
- Psycopg2
- Pycryptodome
- Pyjwt
- Pymongo
- Pymssql
- Pymysql
- Pyramid
- Redis
- Requests
- Sh
- Sqlalchemy
- Tormysql
- Urllib3
- Webrepl
- Wtforms
- Ruby
- Rust
- Scala
- Solidity
- Swift
- Terraform
- Typescript
- Yaml
Flask-login-session-protection-none
Flask login session protection none
Flask-Login provides session protection to help prevent user sessions from being stolen. When this is active, sessions will be marked as non-fresh when the user’s IP or user agent is changed. It is not advised to disable this feature.
Likelihood: LOW
Confidence: HIGH
CWE:
- CWE-613: Insufficient Session Expiration
OWASP:
- A02:2017 - Broken Authentication
- A07:2021 - Identification and Authentication Failures