CVE-2013-7134

no score yetEPSS 2.3%

phusion juvia: no CVSS score yet. EPSS 2.3% chance of exploitation in the next 30 days.

Juvia uses the same secret key for all installations, which allows remote attackers to have unspecified impact by leveraging the secret key in app/config/initializers/secret_token.rb, related to cookies.

EPSS: 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
CWE: CWE-255
Published: 2014-04-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

phusion:juvia

References

http://www.openwall.com/lists/oss-security/2013/12/16/3
http://www.openwall.com/lists/oss-security/2013/12/18/1
https://github.com/phusion/juvia/issues/55
http://www.openwall.com/lists/oss-security/2013/12/16/3
http://www.openwall.com/lists/oss-security/2013/12/18/1

Check your stack JSON