Session Fixation — Session fixation causes a victim to use a session identifier that an attacker already knows or controls. The attacker then attempts to access the authenticated session. Replacing session identifiers at authentication and privilege changes helps prevent this abuse. – Session Attack

Added October 7, 2026