CVE-2013-7222

config/initializers/secret_token.rb in Fat Free CRM before 0.12.1 has a fixed FatFreeCRM::Application.config.secret_token value, which makes it easier for…

published January 2, 2014

CVSS
—
EPSS
2%
Percentile
84.1
In the wild
Unconfirmed
What it is

config/initializers/secret_token.rb in Fat Free CRM before 0.12.1 has a fixed FatFreeCRM::Application.config.secret_token value, which makes it easier for remote attackers to spoof signed cookies by referring to the key in the source code.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02424 · 84.1th percentile
Published
2014-01-02T11:00Z
EPSS history
Timeline
  • 02 JAN 11:00Z
    config/initializers/secret_token.rb in Fat Free CRM before 0.12.1 has a fixed FatFreeCRM::Application.config.secret_token value, which makes it easier for…
    cvelistv5