CVE-2015-1820

Published August 9th, 2017

View on NVD ↗

CVSS v3

N/A

CVSS v2

7.5

HIGH

Affected

PROJECT

Description

REST client for Ruby (aka rest-client) before 1.8.0 allows remote attackers to conduct session fixation attacks or obtain sensitive cookie information by leveraging passage of cookies set in a response to a redirect.

rest-client/rest-client

Simple HTTP and REST client for Ruby, inspired by microframework syntax for specifying actions.

GitHub

5.22K