漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Rack session gets restored after deletion
Vulnerability Description
Rack::Session is a session management implementation for Rack. In versions starting from 2.0.0 to before 2.1.1, when using the Rack::Session::Pool middleware, and provided the attacker can acquire a session cookie (already a major issue), the session may be restored if the attacker can trigger a long running request (within that same session) adjacent to the user logging out, in order to retain illicit access even after a user has attempted to logout. This issue has been patched in version 2.1.1.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Vulnerability Type
使用共享资源的并发执行不恰当同步问题(竞争条件)
Vulnerability Title
Rack::Session 安全漏洞
Vulnerability Description
Rack::Session是Official Rack repositories开源的一个应用程序。 Rack::Session 2.0.0至2.1.1之前版本存在安全漏洞，该漏洞源于会话管理不当，可能导致会话恢复攻击。
CVSS Information
N/A
Vulnerability Type
N/A