CVE-2012-2671
rtomayko rack-cach: no CVSS score yet. EPSS 2.3% chance of exploitation in the next 30 days. Fixed in rack-cache 1.2.
The Rack::Cache rubygem 0.3.0 through 1.1 caches Set-Cookie and other sensitive headers, which allows attackers to obtain sensitive cookie information, hijack web sessions, or have other unspecified impact by accessing the cache.
- EPSS
- 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- rtomayko:rack-cach
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-hrp6-w4v2-8737 | RubyGems | rack-cache | >=0.3.0 <1.2 | 1.2 |