CVE-2015-1820

CVE-2015-1820 describes a critical session fixation and sensitive cookie information disclosure vulnerability in the Ruby rest-client library, affecting versions prior to 1.8.0. Attackers can exploit this by leveraging the client's handling of cookies during redirects, potentially compromising user sessions or stealing sensitive data. With a CVSS score of 9.8 (CRITICAL), this vulnerability is easily exploitable over the network with no user interaction, leading to high impacts on confidentiality, integrity, and availability. Despite its severity, there is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.