← Database

CVE-2007-5380

MEDIUM CVSS: 6.8 Published: 2007-10-19 Modified: 2026-06-16

Description

Session fixation vulnerability in Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers to hijack web sessions via unspecified vectors related to "URL-based sessions."

Affected Platforms

David Hansson Ruby On Rails

Weakness Type

NVD-CWE-Other

References