Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Ruby on Rails Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2020-8166 - Vulnerability Database
Ruby on Rails

Ruby on Rails Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2020-8166

Medium
Reference: CVE-2020-8166
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-8166
Title: Ruby on Rails Cross-Site Request Forgery (CSRF) Vulnerability
Overview:

A CSRF forgery vulnerability exists in rails lt 5.2.5 rails lt 6.0.4 that makes it possible for an attacker to given a global CSRF token such as the one present in the authenticity_token meta tag forge a per-form CSRF token.