Read about it on https://oauth.pbwiki.com/OAuth-Session-Fixation-Advisory.
(Silly wiki lets you create links with trailing spaces in the URL.)