CVE-2013-7134
Juvia uses the same secret key for all installations, which allows remote attackers to have unspecified impact by leveraging the secret key in app/config/initializers/secret_token.rb, related to cookies.
Ver en NVDSeveridad
N/A
EPSS
Probabilidad de explotación (próx. 30 días): 0.0052 (0.5%)
Percentil: 66.8%
EPSS: 2026-05-06
Afecta
phusion:juviaDescripción técnica
Juvia uses the same secret key for all installations, which allows remote attackers to have unspecified impact by leveraging the secret key in app/config/initializers/secret_token.rb, related to cookies.
Publicada: 29/4/2014, 14:38:46
Última modificación: 6/5/2026, 22:30:45
Referencias
- http://www.openwall.com/lists/oss-security/2013/12/16/3
- http://www.openwall.com/lists/oss-security/2013/12/18/1
- https://github.com/phusion/juvia/issues/55
- http://www.openwall.com/lists/oss-security/2013/12/16/3
- http://www.openwall.com/lists/oss-security/2013/12/18/1
- https://github.com/phusion/juvia/issues/55