CVE-2013-7134
Juvia uses the same secret key for all installations, which allows remote attackers to have unspecified impact by leveraging the secret key in app/config/initializers/secret_token.rb, related to cookies.
View on NVDSeverity
N/A
EPSS
Probability of exploitation (next 30 days): 0.0052 (0.5%)
Percentile: 66.8%
EPSS: 2026-05-06
Affects
phusion:juviaTechnical description
Juvia uses the same secret key for all installations, which allows remote attackers to have unspecified impact by leveraging the secret key in app/config/initializers/secret_token.rb, related to cookies.
Published: 4/29/2014, 2:38:46 PM
Last modified: 5/6/2026, 10:30:45 PM
References
- http://www.openwall.com/lists/oss-security/2013/12/16/3
- http://www.openwall.com/lists/oss-security/2013/12/18/1
- https://github.com/phusion/juvia/issues/55
- http://www.openwall.com/lists/oss-security/2013/12/16/3
- http://www.openwall.com/lists/oss-security/2013/12/18/1
- https://github.com/phusion/juvia/issues/55