CVE-2007-5380
david hansson ruby on rails: no CVSS score yet. EPSS 3.6% chance of exploitation in the next 30 days. Fixed in rails 1.2.4.
Session fixation vulnerability in Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers to hijack web sessions via unspecified vectors related to "URL-based sessions."
- EPSS
- 3.6% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- david_hansson:ruby_on_rails
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-jwhv-rgqc-fqj5 | RubyGems | rails | <1.2.4 | 1.2.4 |