Ruby on Rails Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2020-8167 - Vulnerability Database

Ruby on Rails Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2020-8167

Medium

Reference: CVE-2020-8167

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-8167

Title: Ruby on Rails Cross-Site Request Forgery (CSRF) Vulnerability

Overview:

A CSRF vulnerability exists in rails lt 6.0.3 rails-ujs module that could allow attackers to send CSRF tokens to wrong domains.