https://auditbuffet.com/patterns/ab-002207
Session fixation protection is in place — Pattern Catalog | AuditBuffet
Session fixation (CWE-384, CAPEC-61) lets an attacker plant a known session token in a victim's browser before login, then use that same token after the victim...
session fixation protectionin placepatterncatalog