4 matches found
CVE-2013-7134
Juvia uses the same secret key for all installations, which allows remote attackers to have unspecified impact by leveraging the secret key in app/config/initializers/secrettoken.rb, related to cookies...
Design/Logic Flaw
Juvia uses the same secret key for all installations, which allows remote attackers to have unspecified impact by leveraging the secret key in app/config/initializers/secrettoken.rb, related to cookies...
CVE-2013-7134
CVE-2013-7134 affects Juvia; vulnerability arises from using the same secret key across installations, allowing remote attackers to leverage the secret_token.rb in cookies with unspecified impact. The provided documents state the issue and linked references but do not supply concrete exploit deta...
CVE-2013-7134
Juvia uses the same secret key for all installations, which allows remote attackers to have unspecified impact by leveraging the secret key in app/config/initializers/secrettoken.rb, related to cookies...