Lucene search
+L

3 matches found

OSV
OSV
added 2022/05/17 4:55 a.m.46 views

GHSA-G897-CGFC-7Q8V Fat Free CRM has fixed token value

config/initializers/secrettoken.rb in Fat Free CRM before 0.12.1 has a fixed FatFreeCRM::Application.config.secrettoken value, which makes it easier for remote attackers to spoof signed cookies by referring to the key in the source code...

5CVSS6.4AI score0.02424EPSS
SaveExploits1References8
Rows per page
Query Builder