CVE-2013-7134

Juvia uses the same secret key for all installations, which allows remote attackers to have unspecified impact by leveraging the secret key in…

published April 29, 2014

CVSS
—
EPSS
2%
Percentile
83.4
In the wild
Unconfirmed
What it is

Juvia uses the same secret key for all installations, which allows remote attackers to have unspecified impact by leveraging the secret key in app/config/initializers/secret_token.rb, related to cookies.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02331 · 83.4th percentile
Published
2014-04-29T14:00Z
EPSS history
Timeline
  • 29 APR 14:00Z
    Juvia uses the same secret key for all installations, which allows remote attackers to have unspecified impact by leveraging the secret key in…
    cvelistv5