CVE-2013-7134

NONE EPSS 81.5%
Published Apr 29, 201412y ago · Modified Jun 17, 20262w ago
Find Similar
Published Apr 29, 2014 12y ago
Last Modified Jun 17, 2026 2w ago

Description

Juvia uses the same secret key for all installations, which allows remote attackers to have unspecified impact by leveraging the secret key in app/config/initializers/secret_token.rb, related to cookies.

Threat Intelligence

EPSS Exploit Probability
81.5% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-255

Affected Products 1

VendorProductVersionRange
phusionjuvia*any

References 3

  • openwall.com http://www.openwall.com/lists/oss-security/2013/12/16/3
  • openwall.com http://www.openwall.com/lists/oss-security/2013/12/18/1
  • github.com https://github.com/phusion/juvia/issues/55

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.