Session fixation vulnerability in Rails  (GHSA-jwhv-rgqc-fqj5)
Published: 2017-10-24T18:33:38Z
Aliases: CVE-2007-5380
Severity: MODERATE · CWE: CWE-384

Session fixation vulnerability in Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers to hijack web sessions via unspecified vectors related to "URL-based sessions."

Affected packages:
package: ecosystem: RubyGems
name: rails
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 1.2.4