CVE-2007-5380
Session fixation vulnerability in Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers to hijack web sessions via unspecified vectors related to "URL-based sessions."
- Affected products
- Ruby On Rails
- David Hansson Ruby On Rails
- ≤ 1.2.3
- Fix
- Available
- CVSS 2.0
- 6.8 MEDIUM
- EPSS
- 3.6% (88th percentile)
- NVD status
- Modified
- Published
- 2007-10-19
CVE-2007-5380 at NVD
No indexed exploits for CVE-2007-5380 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2007-5380 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.