PT-2014-3291

Name of the Vulnerable Software and Affected Versions Fat Free CRM versions prior to 0.12.1 Description The issue makes it easier for remote attackers to spoof signed cookies by referring to the key in the source code. This is due to a fixed FatFreeCRM::Application.config.secret token value in th...